CVE-2026-40315

OVERVIEW CVE-2026-40315 is a critical SQL identifier injection vulnerability affecting PraisonAI versions prior to 4.5.133. The flaw exists in the SQLiteConversationStore component, where the table_prefix configuration parameter is directly concatenated into SQL queries via f-strings without validation or sanitization. An attacker who controls configuration input through mechanisms such as from_yaml or from_dict can inject arbitrary SQL fragments to alter query structure, enabling unauthorized access to internal database tables and manipulation of query results through UNION-based injection techniques. SEVERITY This vulnerability carries a CVSS 3.1 score of 9.8 (CRITICAL) with a network attack vector, low attack complexity, and no privileges or user interaction required. The attack surface is unchanged, meaning the compromise affects the confidentiality, integrity, and availability of the entire system. An attacker exploiting this flaw can disclose internal SQLite schema information by accessing the sqlite_master table and tamper with query results to extract or modify sensitive data. The high severity is justified by the unrestricted nature of the attack and the complete system compromise potential. EXPLOITATION STATUS The vulnerability is currently tracked on the active hot list for community attention, indicating elevated concern within the security community. The EPSS score of 0.00038 is relatively low, suggesting limited evidence of active exploitation in the wild at present. However, given the critical CVSS rating and straightforward attack mechanism, organizations should prioritize patching to version 4.5.133 immediately, as proof-of-concept code could be developed quickly if this vulnerability gains wider attention.