PyPI/praisonai CVE-2026-60090: unknown, EPSS 0.70%

PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL

Action: Upgrade praisonai to 4.6.78 or later.

pip install praisonai==4.6.78

Affected

Fixed versions

Sources

• osv: PYSEC-2026-4260
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-wf65-4jjx-q444
• https://nvd.nist.gov/vuln/detail/CVE-2026-60090
• https://github.com/MervinPraison/PraisonAI/commit/3aa9cbc2bd49c23a32be0a89a5e620d13d843eab
• https://github.com/MervinPraison/PraisonAI
• https://www.vulncheck.com/advisories/praisonai-before-sql-cql-injection-via-vector-dimension
• https://pypi.org/project/praisonai
• https://github.com/advisories/GHSA-wf65-4jjx-q444

CVE-2026-60090 · published 2026-10-15T10:22:51.792533Z · modified 2026-10-15T14:45:13.270844798Z · JSON