CVE-2026-47409
Received Received - Intake

Authorization Bypass in PraisonAI Platform

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: GitHub, Inc.

Description
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enabling owner lockout. The `DELETE /workspaces/{workspace_id}/members/{user_id}` endpoint is gated only by `require_workspace_member(workspace_id)` (default `min_role="member"`). Any member can remove any other member, including the workspace owner, using a single DELETE. There is no caller-role check, no target-role check, no "cannot remove last owner" guard. PraisonAI Platform version 0.1.4 patches the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-21
Last Modified
2026-07-21
Generated
2026-07-21
AI Q&A
2026-07-21
EPSS Evaluated
N/A
NVD
CVE-2026-47409
EUVD
EUVD-2026-46323

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
praisonai praisonai_platform to 0.1.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-47409 is an authorization bypass in the PraisonAI platform where any workspace member can remove any other member, including the workspace owner, via the DELETE /workspaces/{workspace_id}/members/{user_id} endpoint. The endpoint only checks if the caller is a workspace member without verifying their role or preventing removal of the last owner.

Detection Guidance

Check PraisonAI server logs for repeated DELETE requests to /workspaces/{id}/members/{user_id} endpoints. Monitor for unexpected user removal events, especially the workspace owner being removed. Verify if any non-owner users have executed these endpoints.

Impact Analysis

This vulnerability allows any member to lock out the workspace owner by removing them, leading to permanent loss of access to the workspace. Attackers could gain full control over the workspace, causing data loss or unauthorized changes.

Compliance Impact

This vulnerability could lead to unauthorized access or loss of control over sensitive data, which may violate compliance requirements under GDPR and HIPAA. GDPR requires strict access controls and data protection measures, while HIPAA mandates safeguards to prevent unauthorized data access or destruction. The authorization bypass could result in unauthorized data exposure or deletion, potentially leading to non-compliance.

Mitigation Strategies

Upgrade PraisonAI Platform to version 0.1.4 or later to apply the patch. Review workspace member roles and remove unnecessary members. Implement additional authorization checks at the application level to prevent unauthorized deletions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47409. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart