CVE-2026-47399
Received Received - Intake

Object Access Bypass in PraisonAI Platform

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: GitHub, Inc.

Description
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, the workspace-scoped REST routes contain a systemic object-level authorization flaw that allows an authenticated user from one workspace to access, modify, and delete objects belonging to another workspace by supplying the victim object's global UUID. The affected pattern appears in workspace-scoped routes such as agents, projects, issues, and comments. The route layer verifies that the caller is a member of the `workspace_id` provided in the URL, but the service layer later resolves the target object by global object ID only. It does not verify that the resolved object actually belongs to the workspace in the URL. As a result, a valid member of `workspace_attacker` can call a route under `/api/v1/workspaces/{workspace_attacker}/...` while supplying an object UUID from `workspace_victim`. The server authorizes the request based on membership in `workspace_attacker`, then fetches or mutates the victim object by global UUID. This breaks the platform's workspace isolation boundary. PraisonAI Platform version 0.1.4 patches the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-21
Last Modified
2026-07-21
Generated
2026-07-21
AI Q&A
2026-07-21
EPSS Evaluated
N/A
NVD
CVE-2026-47399
EUVD
EUVD-2026-46313

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
praisonai praisonai_platform to 0.1.4 (exc)
mervinpraison praisonai_platform to 0.1.4 (exc)
mervinpraison praisonai_platform to 0.1.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an object-level authorization flaw in the PraisonAI Platform affecting versions before 0.1.4. It allows authenticated users in one workspace to access, modify, or delete objects belonging to another workspace by providing the victim object's global UUID. The issue occurs because the API verifies workspace membership in the URL but fails to validate that the target object belongs to that workspace when resolving it by UUID.

Detection Guidance

To detect this vulnerability, check if your PraisonAI Platform version is below 0.1.4. Review API logs for unauthorized cross-workspace access attempts or object UUID manipulation in routes like /api/v1/workspaces/{workspace_id}/agents, projects, issues, or comments. Look for 404 errors or unexpected access patterns.

Impact Analysis

An attacker in any workspace could read, modify, or delete sensitive data in other workspaces, including agents, projects, issues, and comments. This breaks workspace isolation, potentially exposing confidential information, disrupting operations, or causing data loss across tenant boundaries.

Compliance Impact

This vulnerability likely violates data isolation requirements in GDPR and HIPAA by allowing unauthorized cross-workspace access to personal or health data. It undermines tenant separation controls mandated by these regulations, potentially leading to compliance violations, legal penalties, and loss of trust.

Mitigation Strategies

Upgrade to PraisonAI Platform version 0.1.4 or later immediately. Ensure the platform server binds to 127.0.0.1 by setting PLATFORM_HOST=127.0.0.1. Review and restrict admin/owner role assignments to workspace owners only. Audit all workspace-scoped routes for unauthorized access attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47399. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart