CVE-2026-60090 is a critical SQL injection vulnerability affecting MervinPraison's PraisonAI product before version 4.6.78. The flaw exists in the create_collection() backends for PGVector and Cassandra knowledge stores, where the dimension parameter is not properly validated or enforced as an integer at runtime. This parameter is directly embedded into the vector column definition of the CREATE TABLE DDL statement. An attacker able to influence this dimension value can inject arbitrary SQL/CQL commands, such as terminating the statement and appending a DROP TABLE command, leading to potential data destruction or compromise.

Successful exploitation allows an unauthenticated attacker to execute arbitrary SQL or CQL commands on the underlying database, including destructive operations like dropping critical tables (e.g., tenant_secrets). This can result in data loss, service disruption, and compromise of sensitive information. The vulnerability has a CVSS 4.0 score of 9.3 (critical), indicating high impact with no required privileges or user interaction.

No official patch or remediation guidance is currently available from the vendor. Users should upgrade to PraisonAI version 4.6.78 or later once released, as this version presumably addresses the vulnerability. Until a fix is available, avoid exposing the create_collection() functionality to untrusted inputs or restrict access to trusted users only. Monitor vendor advisories for updates on official fixes or temporary mitigations.