CVE-2026-47405
Received Received - Intake

Privilege Escalation in PraisonAI Platform

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: GitHub, Inc.

Description
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have a broken workspace authorization check that allows any authenticated low-privilege workspace member to escalate their own role to `owner`. The issue is caused by privileged workspace-management routes using the shared dependency `require_workspace_member(...)` without requiring `admin` or `owner`. The dependency defaults to `min_role="member"`, so routes that should be administrative are accessible to ordinary workspace members. As a result, a normal workspace member can promote their own account from `member` to `owner`; add arbitrary users as `owner` or `admin`; change other members' roles; remove legitimate owners or members; take over workspace membership completely; and/or perform destructive workspace operations after escalation. This is a broken access control / vertical privilege escalation vulnerability. PraisonAI Platform version 0.1.4 patches the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-21
Last Modified
2026-07-21
Generated
2026-07-21
AI Q&A
2026-07-21
EPSS Evaluated
N/A
NVD
CVE-2026-47405
EUVD
EUVD-2026-46314

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
praisonai praisonai_platform to 0.1.4 (exc)
mervinpraison praisonai_platform to 0.1.4 (exc)
mervinpraison praisonai_platform to 0.1.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a broken access control vulnerability in the PraisonAI Platform where authenticated low-privilege workspace members can escalate their own role to owner. The issue occurs because privileged workspace-management routes use a dependency that defaults to the lowest role (member) instead of requiring admin or owner privileges. This allows attackers to self-promote, add malicious users, remove legitimate members, and modify workspace settings without detection.

Detection Guidance

Check PraisonAI Platform version with: pip show praisonai. If version is <= 0.1.2, the system is vulnerable. Inspect workspace membership logs for unauthorized role changes or owner additions.

Impact Analysis

An attacker with low-privilege access could take full control of your workspace by escalating their role to owner. They could add malicious users, remove legitimate members, change roles, and perform destructive operations like deleting data or modifying settings. This could lead to data breaches, loss of sensitive information, or disruption of services.

Compliance Impact

This vulnerability could lead to unauthorized access and modification of sensitive data, violating compliance requirements for GDPR (data protection) and HIPAA (healthcare data privacy). It may result in data breaches, unauthorized disclosures, or loss of audit trails, potentially leading to legal penalties, fines, or reputational damage.

Mitigation Strategies

Upgrade PraisonAI Platform to version 0.1.4 or later immediately. Review workspace membership and roles for unauthorized changes. Revoke access for any suspicious accounts added during the vulnerable period.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47405. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart