CVE-2026-34934: PraisonAI Has Second-Order SQL Injection in `get_all_user_threads`

April 1, 2026 (updated April 6, 2026)

The get_all_user_threads function constructs raw SQL queries using f-strings with unescaped thread IDs fetched from the database. An attacker stores a malicious thread ID via update_thread. When the application loads the thread list, the injected payload executes and grants full database access.

References

github.com/MervinPraison/PraisonAI
github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9cq8-3v94-434g
github.com/advisories/GHSA-9cq8-3v94-434g
nvd.nist.gov/vuln/detail/CVE-2026-34934

Code Behaviors & Features

Detect and mitigate CVE-2026-34934 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →