CVE-2026-60090: PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL
The PGVector and Cassandra knowledge-store backends validate SQL/CQL identifiers such as schema, keyspace, and collection names, but still insert the caller-controlled dimension argument directly into CREATE TABLE vector column declarations. A caller that can influence collection creation dimensions can append SQL/CQL tokens to the generated DDL executed by the database driver.
References
- github.com/MervinPraison/PraisonAI/commit/3aa9cbc2bd49c23a32be0a89a5e620d13d843eab
- github.com/MervinPraison/PraisonAI/security/advisories/GHSA-wf65-4jjx-q444
- github.com/advisories/GHSA-wf65-4jjx-q444
- nvd.nist.gov/vuln/detail/CVE-2026-60090
- www.vulncheck.com/advisories/praisonai-before-sql-cql-injection-via-vector-dimension
Code Behaviors & Features
Detect and mitigate CVE-2026-60090 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →