CVE-2026-47411
Deferred Deferred - Pending Action

Authorization Bypass in PraisonAI Platform

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: GitHub, Inc.

Description
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enabling workspace metadata + settings tampering. The `PATCH /workspaces/{workspace_id}` endpoint is gated only by `require_workspace_member(workspace_id)` (default `min_role="member"`). Any member can rewrite the workspace's `name`, `description`, and the `settings` JSON blob. The settings field is a free-form JSON object — depending on which downstream code reads it, this becomes a configuration-injection primitive for any setting the platform exposes there. PraisonAI Platform version 0.1.4 patches the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-21
Last Modified
2026-07-21
Generated
2026-07-21
AI Q&A
2026-07-21
EPSS Evaluated
N/A
NVD
CVE-2026-47411
EUVD
EUVD-2026-46329

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mervinpraison praisonai_platform to 0.1.2|start_including=0.1.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-47411 is an authorization bypass in the PraisonAI Platform. It allows any workspace member with a 'member' role to modify workspace metadata like name, description, and settings via the PATCH /workspaces/{workspace_id} endpoint. The endpoint only checks for basic membership, not ownership, enabling unauthorized changes.

Detection Guidance

Check if your PraisonAI Platform version is below 0.1.4 by running: pip show praisonai-platform. If installed, verify the version in the output. Inspect network logs for unauthorized PATCH requests to /workspaces/{workspace_id} endpoints with member-level tokens.

Impact Analysis

This vulnerability could allow attackers to alter workspace settings, inject malicious configurations, or disable security features like audit logging. The impact depends on how the settings are used downstream, ranging from cosmetic changes to full security compromises.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA by allowing unauthorized modifications to workspace settings, potentially exposing sensitive data or disabling required security controls. The integrity impact is high, which may violate regulatory requirements for data protection.

Mitigation Strategies

Upgrade PraisonAI Platform to version 0.1.4 or later immediately. Review workspace settings for unauthorized changes. Restrict workspace membership roles to prevent unauthorized access.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47411. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart