CVE-2026-47413
Deferred Deferred - Pending Action

Privilege Escalation in PraisonAI Platform

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: GitHub, Inc.

Description
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have aprivilege escalation / cross-tenant member injection. The `POST /workspaces/{workspace_id}/members` endpoint is gated only by `require_workspace_member(workspace_id)` (default `min_role="member"`) and forwards the request body's `user_id` and `role` straight into `MemberService.add(workspace_id, user_id, role)`, which has no caller-permission check. A user with the lowest workspace privilege can add any user (including a new attacker-controlled second account, or an existing account they want to grief) as owner of the workspace. PraisonAI Platform version 0.1.4 patches the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-21
Last Modified
2026-07-21
Generated
2026-07-21
AI Q&A
2026-07-21
EPSS Evaluated
N/A
NVD
CVE-2026-47413
EUVD
EUVD-2026-46331

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mervinpraison praisonai_platform to 0.1.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-47413 is a privilege escalation vulnerability in the PraisonAI Platform. It allows any workspace member with the lowest privilege level to escalate their access to owner status by exploiting the POST /workspaces/{workspace_id}/members endpoint. The endpoint only checks if the user is a workspace member but does not verify if they can assign the owner role. This enables an attacker to add any user, including a new or existing account they control, as an owner of the workspace.

Detection Guidance

Check PraisonAI Platform logs for suspicious POST requests to /workspaces/{workspace_id}/members with user_id and role parameters set to owner. Monitor for unauthorized role changes in workspace membership.

Impact Analysis

An attacker can exploit this to gain full control over a workspace by adding themselves or another account as an owner. This allows them to perform privileged actions, such as modifying workspace settings, accessing sensitive data, or disrupting operations. The attack requires minimal privileges and no user interaction, making it highly accessible.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Unauthorized privilege escalation may result in data breaches, non-compliance with access control policies, and potential legal consequences for organizations failing to protect user data.

Mitigation Strategies

Upgrade PraisonAI Platform to version 0.1.4 or later. Review workspace member roles and remove any unauthorized owner assignments. Implement stricter role-based access control to prevent non-owners from assigning owner roles.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47413. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart