CVE-2026-47414
Deferred Deferred - Pending Action

Insecure Direct Object Reference in PraisonAI Platform

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: GitHub, Inc.

Description
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. Five label endpoints — `PATCH /workspaces/{workspace_id}/labels/{label_id}`, `DELETE .../labels/{label_id}`, `POST .../issues/{issue_id}/labels/{label_id}`, `DELETE .../issues/{issue_id}/labels/{label_id}`, `GET .../issues/{issue_id}/labels` — gate access on `require_workspace_member(workspace_id)` only and pass URL-supplied `label_id` and `issue_id` straight through to `LabelService` without verifying either belongs to the workspace. PraisonAI Platform version 0.1.4 patches the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-21
Last Modified
2026-07-21
Generated
2026-07-21
AI Q&A
2026-07-21
EPSS Evaluated
N/A
NVD
CVE-2026-47414
EUVD
EUVD-2026-46332

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
mervinpraison praisonai_platform to 0.1.4 (exc)
mervinpraison praisonai_platform to 0.1.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-47414 is an Insecure Direct Object Reference (IDOR) vulnerability in the PraisonAI Platform affecting label endpoints in versions prior to 0.1.4. It allows authenticated users to manipulate labels and issue-label associations across workspaces without proper ownership verification. Five endpoints fail to validate if label_id or issue_id belongs to the specified workspace, enabling unauthorized modifications like renaming, deleting, or attaching labels to issues in other workspaces.

Detection Guidance

To detect this vulnerability, monitor API logs for label-related endpoints (PATCH, DELETE, POST, GET) with mismatched workspace IDs. Check for requests where label_id or issue_id does not belong to the specified workspace_id. Use tools like curl to test endpoints manually: curl -X PATCH http://target/workspaces/1/labels/2 -H 'Authorization: Bearer token' where label_id 2 does not belong to workspace 1.

Impact Analysis

An attacker with valid workspace access could disrupt workflows by renaming or deleting labels in other workspaces, attach unrelated labels to issues, or corrupt label visibility and triage functionality. This could lead to data integrity issues, workflow disruptions, and potential information leakage through mislabeled issues.

Compliance Impact

This vulnerability could impact compliance by allowing unauthorized modifications to data labels and associations across workspaces, potentially violating integrity and confidentiality requirements in GDPR and HIPAA. Unauthorized label changes might lead to incorrect data categorization, affecting data protection measures and audit trails.

Mitigation Strategies

Immediately update PraisonAI Platform to version 0.1.4 or later to patch the IDOR vulnerability. Review and restrict API access to label endpoints, ensuring workspace ownership checks are enforced. Monitor for suspicious label modifications or deletions across workspaces.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47414. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart