PraisonAI versions before 4.5.90 contain an SQL injection vulnerability (CWE-89) in the get_all_user_threads function. The function constructs SQL queries using Python f-strings without escaping thread IDs, which can be manipulated by an attacker who stores a malicious thread ID through the update_thread function. When the thread list is loaded, the injected SQL payload executes, potentially granting the attacker full control over the database. The vulnerability has a CVSS 3.1 score of 9.8, indicating critical severity. The issue is fixed in version 4.5.90.

Successful exploitation allows an unauthenticated attacker to execute arbitrary SQL commands on the PraisonAI database, resulting in full confidentiality, integrity, and availability compromise of the database. This can lead to data theft, data manipulation, or denial of service. No known exploits in the wild have been reported yet.

Upgrade PraisonAI to version 4.5.90 or later, where this SQL injection vulnerability has been patched. Since this is not a cloud service, remediation depends on applying the official fix by updating the software. Patch status is not explicitly stated beyond the version fix, so verify with the vendor advisory for the latest guidance.