63 matches found
PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries
SummaryThe tableprefix configuration value is directly used to construct SQL table identifiers without validation.If an attacker controls this value, they can manipulate SQL query structure, leading to unauthorized data access e.g., reading internal SQLite tables such as sqlitemaster and tamperin...
9.8CVSS6.2AI score0.00404EPSS
SaveExploits1References7Affected Software1
20