Skip to main content
Meet us at Black Hat USA 2026— Las Vegas, August 1–6Book a Meeting
Mallory
CriticalPublic exploit

SQL Injection in PraisonAI get_all_user_threads

IdentifiersCVE-2026-34934CWE-89· Improper Neutralization of Special…

CVE-2026-34934 is a SQL injection vulnerability in PraisonAI, a multi-agent teams system, affecting versions prior to 4.5.90. The flaw is in the get_all_user_threads function, which constructs raw SQL statements using Python f-strings and incorporates thread IDs fetched from the database without proper escaping or parameterization. An attacker can first persist a malicious thread ID via the update_thread function. Later, when the application loads the thread list and get_all_user_threads processes that stored value, the injected SQL payload is executed. This is effectively a second-order SQL injection condition because attacker-controlled data is stored first and executed later in a separate code path.

Share:
For your environment

Are you exposed to this one?

Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.

ANALYST BRIEF

Impact, mitigation & remediation

What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.

Impact

What an attacker gets, and what they’ve been doing with it.

Successful exploitation can grant an attacker full database access. Depending on the database permissions available to the application, this can enable unauthorized reading, modification, or deletion of data, execution of administrative database operations, and potential disruption of application availability. The provided CVSS context and advisory summary indicate high impact to confidentiality, integrity, and availability.

Mitigation

If you can’t patch tonight, do this now.

If immediate upgrade is not possible, reduce exposure by preventing untrusted or malformed thread IDs from being stored through update_thread, validating and constraining thread ID format server-side, and reviewing the codebase for similar second-order SQL injection patterns. Limit the database account used by PraisonAI to the minimum required privileges to reduce blast radius. Monitor for anomalous thread ID values and suspicious database queries triggered during thread list loading.

Remediation

Patch, then assume compromise.

Upgrade PraisonAI to version 4.5.90 or later, which contains the patch for this issue. The vulnerable query construction in get_all_user_threads should be replaced with properly parameterized queries, and any use of Python f-strings or other string interpolation for SQL statement construction with untrusted data should be eliminated.
PUBLIC EXPLOITS

Exploits

No public exploits tracked yet. Mallory keeps watching.

VALID 0 / 0 TOTALView more in app

No public exploit code observed for this vulnerability.

EXPOSURE SURFACE

Affected products & vendors

Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.

VendorProductType
PraisonPraisonaiapplication
PraisonAIPraisonaiapplication

Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.

What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which adversaries are exploiting it right now, which detections to deploy, and what to do tonight.
Exposure mapping

Query your assets running an affected version, and investigate the blast radius.

Threat actor evidence

Every observed campaign linking this CVE to a named adversary.

Associated malware

Malware families riding this exploit, with evidence and IOCs.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

Vendor-by-vendor mapping

Cross-references every affected SKU, including bundled OEM variants.

Social activity7

Community discussion across Reddit, Mastodon, and other social sources.