CVE-2026-47408
Received Received - Intake

Insecure Direct Object Reference in PraisonAI Platform

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: GitHub, Inc.

Description
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The `GET /workspaces/{workspace_id}/issues/{issue_id}/activity` endpoint is gated by `require_workspace_member(workspace_id)` and dispatches to `ActivityService.list_for_issue(issue_id)`, which executes `SELECT * FROM activity WHERE issue_id = :issue_id` with no workspace constraint. A user who is a member of any workspace can read the full activity log of any issue across the entire multi-tenant deployment. PraisonAI Platform version 0.1.4 patches the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-21
Last Modified
2026-07-21
Generated
2026-07-21
AI Q&A
2026-07-21
EPSS Evaluated
N/A
NVD
CVE-2026-47408
EUVD
EUVD-2026-46322

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
praisonai praisonai_platform to 0.1.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-47408 is an Insecure Direct Object Reference (IDOR) vulnerability in the PraisonAI Platform affecting versions before 0.1.4. It allows any workspace member to access activity logs of any issue across the entire multi-tenant deployment, even if the issue belongs to a different workspace. The flaw occurs because the endpoint uses issue_id without verifying workspace ownership, despite membership checks.

Detection Guidance

To detect this vulnerability, check if your PraisonAI Platform version is prior to 0.1.4. Review logs for unauthorized access to activity endpoints like GET /workspaces/{workspace_id}/issues/{issue_id}/activity. Verify if workspace membership checks are bypassed by testing if a user in one workspace can access activity logs of issues in another workspace.

Impact Analysis

An attacker with membership in any workspace can exploit this to read sensitive activity logs, including actor identities, actions, and change histories. This exposes operational workflows, member identities, and potentially embedded secrets, compromising confidentiality of all issues across the platform.

Compliance Impact

This vulnerability likely violates GDPR and HIPAA due to unauthorized access to sensitive data. GDPR requires protecting personal data, while HIPAA mandates safeguarding protected health information. Unauthorized exposure of activity logs containing user identities and actions could lead to compliance breaches and legal consequences.

Mitigation Strategies

Immediately upgrade PraisonAI Platform to version 0.1.4 or later. Review and restrict workspace memberships to trusted users only. Audit activity logs for any unauthorized access attempts. Implement additional validation in the list_issue_activity endpoint to ensure issue_id belongs to the specified workspace_id before returning data.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47408. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart