CVE-2026-41496 Details
Description
PraisonAI is a multi-agent teams system. Prior to praisonai version 4.6.9 and praisonaiagents version 1.6.9, the fix for CVE-2026-40315 added input validation to SQLiteConversationStore only. Nine sibling backends — MySQL, PostgreSQL, async SQLite/MySQL/PostgreSQL, Turso, SingleStore, Supabase, SurrealDB — pass table_prefix straight into f-string SQL. Same root cause, same code pattern, same exploitation. 52 unvalidated injection points across the codebase. postgres.py additionally accepts an unvalidated schema parameter used directly in DDL. This issue has been patched in praisonai version 4.6.9 and praisonaiagents version 1.6.9.
A SQL injection vulnerability has been identified in PraisonAI, a multi-agent teams system, and its agents package, prior to versions 4.6.9 and 1.6.9 respectively. The vulnerability arises in nine conversation store backends—MySQL, PostgreSQL, Turso, SingleStore, Supabase, SurrealDB, and async variants of SQLite, MySQL, and PostgreSQL—that directly incorporate an unvalidated 'table_prefix' into SQL commands using f-strings. This flaw, which affects a total of 52 injection points across the codebase, allows for arbitrary SQL execution, with the injected SQL being executed as part of data definition and manipulation language operations, such as creating or dropping tables and managing database records. Additionally, the PostgreSQL backend's 'schema' parameter introduces a second injection vector by allowing unvalidated schema modifications via data definition language commands.
Users should update to PraisonAI version 4.6.9 and PraisonAI Agents version 1.6.9.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 8, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rg3h-x3jw-7jm5 | CISA-ADP | ExploitVendor Advisory |
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rg3h-x3jw-7jm5 | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| praison praisonai | < 4.6.9 |
CPE
Remediation
| |
| praison praisonaiagents | < 1.6.9 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 9, 2026 | CVE Modified | CISA-ADP |
| May 8, 2026 | Initial Analysis | [email protected] |
| May 8, 2026 | New CVE Received | [email protected] |