CVE-2026-41496

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-41496
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-41496.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-41496
Aliases
Published
2026-05-08T13:19:10.753Z
Modified
2026-07-08T08:13:13.058889811Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)
Details

PraisonAI is a multi-agent teams system. Prior to praisonai version 4.6.9 and praisonaiagents version 1.6.9, the fix for CVE-2026-40315 added input validation to SQLiteConversationStore only. Nine sibling backends — MySQL, PostgreSQL, async SQLite/MySQL/PostgreSQL, Turso, SingleStore, Supabase, SurrealDB — pass table_prefix straight into f-string SQL. Same root cause, same code pattern, same exploitation. 52 unvalidated injection points across the codebase. postgres.py additionally accepts an unvalidated schema parameter used directly in DDL. This issue has been patched in praisonai version 4.6.9 and praisonaiagents version 1.6.9.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "praisonaiagents < 1.6.9"
                },
                {
                    "last_affected": "praisonaiagents < 1.6.9"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41496.json",
    "cwe_ids": [
        "CWE-89"
    ],
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/mervinpraison/praisonai

Affected ranges

Type
GIT
Repo
https://github.com/mervinpraison/praisonai
Events
Introduced
9463b1f6419e1db402b2528d6f52cd090b5723b1
Fixed
9463b1f6419e1db402b2528d6f52cd090b5723b1
Database specific 
{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "cpe": "cpe:2.3:a:praison:praisonai:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "praisonai < 4.6.9"
        },
        {
            "last_affected": "praisonai < 4.6.9"
        },
        {
            "introduced": "0"
        },
        {
            "fixed": "4.6.9"
        }
    ]
}

Affected versions

praisonai < 4.*
praisonai < 4.6.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-41496.json"