CVE-2026-60090 is a critical SQL injection vulnerability affecting MervinPraison's PraisonAI product before version 4.6.78. The flaw exists in the create_collection() backend implementations for PGVector and Cassandra knowledge stores, where the dimension argument is not properly validated at runtime despite being declared as an integer. This unchecked interpolation of the dimension value into the vector column of the CREATE TABLE DDL statement allows an attacker to inject malicious SQL or CQL commands. For example, an attacker could supply a crafted string like '3); DROP TABLE tenant_secrets; --' to execute arbitrary database commands, potentially compromising data integrity and availability.

Successful exploitation of this vulnerability can lead to arbitrary SQL or CQL command execution within the database context used by PraisonAI. This can result in unauthorized data manipulation, including deletion of critical tables such as tenant_secrets, leading to data loss or service disruption. The vulnerability requires no privileges or user interaction and has a high attack vector (network), making it highly exploitable remotely.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid passing untrusted input to the dimension parameter in create_collection() calls. Implement input validation or sanitization on the dimension argument to ensure it is a valid integer before use. Monitor vendor channels for updates and apply patches promptly once available.