CVE-2026-60090 - PraisonAI before 4.6.78 SQL/CQL Injection via vector dimension
CVE ID :CVE-2026-60090 Published : July 11, 2026, 2:16 p.m. | 16 minutes ago Description :PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store create_collection() backends. Although schema, keyspace, and...