CVE-2026-47409

Publié : 21 juillet 2026

Modifié : 21 juillet 2026

Score CVSS

8.1

HIGH

Description détaillée

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enabling owner lockout. The `DELETE /workspaces/{workspace_id}/members/{user_id}` endpoint is gated only by `require_workspace_member(workspace_id)` (default `min_role="member"`). Any member can remove any other member, including the workspace owner, using a single DELETE. There is no caller-role check, no target-role check, no "cannot remove last owner" guard. PraisonAI Platform version 0.1.4 patches the issue.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Références et Patchs

https://github.com/MervinPraison/PraisonAI/commit/24385d64876577620f749957bd4814f162f4ca47 https://github.com/MervinPraison/PraisonAI/pull/1686 https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-w388-2392-px73

Dernières Vulnérabilités

CVE-2026-64798

Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy.

VOIR DÉTAILS

CVE-2026-64797

IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. Attackers could spoof the IP used for automatic login and potentially impersonate mapped accounts.

VOIR DÉTAILS

CVE-2026-64796

Free did not require both the article creator and last modifier to be Super Users before executing article PHP. Pro did not consistently enforce configured CSS, JavaScript and PHP permissions across tags, attributes, files and both article owners. PHP include attributes could also escape the configured include folder, and executable script/style variants could bypass detection.

VOIR DÉTAILS