Description
PraisonAI is a multi-agent teams system. From version 2.4.1 to before version 4.6.34, PraisonAI exposes optional SQL/CQL-backed knowledge-store implementations that build table and index identifiers from unvalidated name and collection arguments. Applications that pass untrusted collection names into these backends can trigger SQL or CQL injection. This issue has been patched in version 4.6.34.
Affected products
praison: praisonai
References2
- github.com/MervinPraison/PraisonAI/security/advisories/GHSA-364… ExploitVendor Advisory
- github.com/MervinPraison/PraisonAI/security/advisories/GHSA-364… ExploitVendor Advisory
Metrics
- CVSS 3.1
-
6.3
MEDIUM
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L - EPSS — exploit probability
- 0% percentile: 12 · as of 13 November 2026
- CWE
- CWE-20CWE-89
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.