CVE-2026-47408

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The `GET /workspaces/{workspace_id}/issues/{issue_id}/activity` endpoint is gated by `require_workspace_member(workspace_id)` and dispatches to `ActivityService.list_for_issue(issue_id)`, which executes `SELECT * FROM activity WHERE issue_id = :issue_id` with no workspace constraint. A user who is a member of any workspace can read the full activity log of any issue across the entire multi-tenant deployment. PraisonAI Platform version 0.1.4 patches the issue.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/MervinPraison/PraisonAI/commit/ef79b7a0561796ad9807f0f09538c25cc78d3619
https://github.com/MervinPraison/PraisonAI/pull/1685
https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-27p4-pjqv-whgj
https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-27p4-pjqv-whgj

Configurations

No configuration.

History

24 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) PraisonAI Platform es la capa de plataforma para el sistema de equipos multiagente de PraisonAI. Las versiones anteriores a la 0.1.4 tienen una Referencia Directa Insegura a Objeto. El endpoint ’GET /workspaces/{workspace_id}/issues/{issue_id}/activity’ está protegido por ’require_workspace_member(workspace_id)’ y despacha a ’ActivityService.list_for_issue(issue_id)’, que ejecuta ’SELECT * FROM activity WHERE issue_id = :issue_id’ sin restricción de espacio de trabajo. Un usuario que es miembro de cualquier espacio de trabajo puede leer el registro de actividad completo de cualquier incidencia en toda la implementación multi-inquilino. PraisonAI Platform versión 0.1.4 corrige la incidencia.

Information

Published : 2026-07-21 17:17

Updated : 2026-10-24 19:10

NVD link : CVE-2026-47408

Mitre link : CVE-2026-47408

CVE.ORG link : CVE-2026-47408

JSON object : View

Products Affected

No product.

CWE

CWE-639

Authorization Bypass Through User-Controlled Key

{"id": "CVE-2026-47408", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-47408", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-23T14:25:12.835337Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "MervinPraison", "product": "praisonai-platform", "versions": [{"status": "affected", "version": "< 0.1.4"}]}]}], "published": "2026-07-21T17:17:09.500", "references": [{"url": "https://github.com/MervinPraison/PraisonAI/commit/ef79b7a0561796ad9807f0f09538c25cc78d3619", "source": "security-advisories@github.com"}, {"url": "https://github.com/MervinPraison/PraisonAI/pull/1685", "source": "security-advisories@github.com"}, {"url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-27p4-pjqv-whgj", "source": "security-advisories@github.com"}, {"url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-27p4-pjqv-whgj", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-639"}]}], "descriptions": [{"lang": "en", "value": "PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The `GET /workspaces/{workspace_id}/issues/{issue_id}/activity` endpoint is gated by `require_workspace_member(workspace_id)` and dispatches to `ActivityService.list_for_issue(issue_id)`, which executes `SELECT * FROM activity WHERE issue_id = :issue_id` with no workspace constraint. A user who is a member of any workspace can read the full activity log of any issue across the entire multi-tenant deployment. PraisonAI Platform version 0.1.4 patches the issue."}, {"lang": "es", "value": "PraisonAI Platform es la capa de plataforma para el sistema de equipos multiagente de PraisonAI. Las versiones anteriores a la 0.1.4 tienen una Referencia Directa Insegura a Objeto. El endpoint \u2019GET /workspaces/{workspace_id}/issues/{issue_id}/activity\u2019 est\u00e1 protegido por \u2019require_workspace_member(workspace_id)\u2019 y despacha a \u2019ActivityService.list_for_issue(issue_id)\u2019, que ejecuta \u2019SELECT * FROM activity WHERE issue_id = :issue_id\u2019 sin restricci\u00f3n de espacio de trabajo. Un usuario que es miembro de cualquier espacio de trabajo puede leer el registro de actividad completo de cualquier incidencia en toda la implementaci\u00f3n multi-inquilino. PraisonAI Platform versi\u00f3n 0.1.4 corrige la incidencia."}], "lastModified": "2026-10-24T19:10:00.127", "sourceIdentifier": "security-advisories@github.com"}