CVE-2026-47416
Deferred Deferred - Pending Action

Privilege Escalation in PraisonAI Platform

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: GitHub, Inc.

Description
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 are vulnerable to vertical privilege escalation. The `PATCH /workspaces/{workspace_id}/members/{user_id}` endpoint is gated by `require_workspace_member(workspace_id)`, which defaults to `min_role="member"` and is never overridden by the route. The handler then calls `MemberService.update_role(workspace_id, user_id, body.role)` which sets the target member's role to whatever the request body specifies, with no check that the caller has owner-or-admin privilege, no check that the new role is not higher than the caller's own, and no check that the caller is not silently promoting themselves. PraisonAI Platform version 0.1.4 patches the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-21
Last Modified
2026-07-21
Generated
2026-07-21
AI Q&A
2026-07-21
EPSS Evaluated
N/A
NVD
CVE-2026-47416
EUVD
EUVD-2026-46334

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
mervinpraison praisonai_platform to 0.1.4 (exc)
mervinpraison praisonai_platform to 0.1.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-47416 is a critical vertical privilege escalation vulnerability in PraisonAI Platform versions prior to 0.1.4. It allows any workspace member to escalate their privileges to owner status via a single HTTP PATCH request to the `/workspaces/{workspace_id}/members/{user_id}` endpoint. The flaw exists because the endpoint lacks proper authorization checks, enabling attackers to assign themselves or others a higher role without verifying the caller's privileges.

The vulnerability stems from the `require_workspace_member` dependency defaulting to a minimum role of 'member' and the `MemberService.update_role` function not validating if the caller has sufficient privileges to assign a higher role.

Detection Guidance

Check for unauthorized HTTP PATCH requests to the /workspaces/{workspace_id}/members/{user_id} endpoint with role changes to 'owner'. Monitor logs for requests where the user role is elevated without proper authorization checks.

Impact Analysis

An attacker with basic workspace membership can exploit this vulnerability to gain full administrative control over the workspace. This includes modifying settings, managing members, or deleting the workspace entirely. The impact is severe due to the low attack complexity and potential for confidentiality and integrity breaches.

Compliance Impact

This vulnerability could lead to unauthorized access and control over sensitive data, violating compliance requirements for GDPR and HIPAA. GDPR mandates strict access controls and data protection, while HIPAA requires safeguards to prevent unauthorized modifications to protected health information. Exploitation of this flaw may result in non-compliance and potential legal consequences.

Mitigation Strategies

Upgrade PraisonAI Platform to version 0.1.4 or later to patch the vulnerability. Ensure strict role validation is enforced in the endpoint and service layer to prevent unauthorized privilege escalation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47416. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart