CVE-2026-47412
Deferred Deferred - Pending Action

Authorization Bypass in PraisonAI Platform

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: GitHub, Inc.

Description
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enabling destructive action. The `DELETE /workspaces/{workspace_id}` endpoint is gated only by `require_workspace_member(workspace_id)` (default `min_role="member"`). Any member of the workspace can issue a single DELETE to wipe the entire workspace, including every project, issue, comment, agent, label, and member record (cascading via the foreign-key relationships). There is no owner-role gate, no confirmation token, no soft-delete window, no recovery path. PraisonAI Platform version 0.1.4 patches the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-21
Last Modified
2026-07-21
Generated
2026-07-21
AI Q&A
2026-07-21
EPSS Evaluated
N/A
NVD
CVE-2026-47412
EUVD
EUVD-2026-46330

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-47412 is a high-severity authorization bypass in PraisonAI Platform versions prior to 0.1.4. It allows any workspace member to delete an entire workspace via the DELETE /workspaces/{workspace_id} endpoint. The vulnerability occurs because the endpoint only checks basic membership (min_role="member") instead of requiring owner-level privileges. This flaw enables a low-privilege user to irrevocably wipe all workspace data, including projects, issues, comments, agents, labels, and members, without confirmation or recovery options.

Detection Guidance

Check if your PraisonAI Platform version is below 0.1.4 by running: pip show praisonai-platform. If installed, verify the version in the package metadata. Inspect API logs for DELETE requests to /workspaces/{workspace_id} from non-owner accounts. Look for unexpected workspace deletions or data loss events in application logs.

Impact Analysis

This vulnerability allows any member of a workspace to delete the entire workspace, including all projects, issues, comments, agents, labels, and members. The deletion is permanent with no recovery path, leading to complete data loss. The attack can be executed remotely with low complexity and does not require elevated privileges beyond basic workspace membership.

Compliance Impact

This vulnerability severely impacts compliance with GDPR and HIPAA by enabling unauthorized data destruction. GDPR requires data integrity and availability, while HIPAA mandates protection against unauthorized deletion of protected health information. The flaw allows non-owner users to delete sensitive data permanently, violating these regulations and potentially leading to legal penalties and loss of trust.

Mitigation Strategies

Upgrade PraisonAI Platform to version 0.1.4 or later immediately. Review workspace member roles and restrict DELETE permissions to owners only. Implement additional authorization checks beyond require_workspace_member, such as requiring min_role='owner'. Enable audit logging for workspace deletion events to monitor for abuse.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47412. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart