CVE-2026-47411

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enabling workspace metadata + settings tampering. The `PATCH /workspaces/{workspace_id}` endpoint is gated only by `require_workspace_member(workspace_id)` (default `min_role="member"`). Any member can rewrite the workspace's `name`, `description`, and the `settings` JSON blob. The settings field is a free-form JSON object — depending on which downstream code reads it, this becomes a configuration-injection primitive for any setting the platform exposes there. PraisonAI Platform version 0.1.4 patches the issue.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rcmc-q9rj-4wmq
https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rcmc-q9rj-4wmq

Configurations

No configuration.

History

24 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) Plataforma PraisonAI es la capa de plataforma para el sistema de equipos multiagente PraisonAI. Las versiones anteriores a la 0.1.4 tienen un bypass de autorización que permite la manipulación de metadatos + configuraciones del espacio de trabajo. El endpoint “PATCH /workspaces/{workspace_id}” está restringido solo por “require_workspace_member(workspace_id)” (por defecto “min_role=’member’”). Cualquier miembro puede reescribir el “name”, la “description” y el blob JSON de “settings” del espacio de trabajo. El campo de “settings” es un objeto JSON de formato libre - dependiendo de qué código descendente lo lea, esto se convierte en una primitiva de inyección de configuración para cualquier configuración que la plataforma exponga allí. La versión 0.1.4 de Plataforma PraisonAI aplica un parche al problema.

Information

Published : 2026-07-21 18:16

Updated : 2026-10-24 19:10

NVD link : CVE-2026-47411

Mitre link : CVE-2026-47411

CVE.ORG link : CVE-2026-47411

JSON object : View

Products Affected

No product.

CWE

CWE-269

Improper Privilege Management

CWE-862

Missing Authorization

{"id": "CVE-2026-47411", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-47411", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-21T17:52:15.640262Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "MervinPraison", "product": "praisonai-platform", "versions": [{"status": "affected", "version": "< 0.1.4"}]}]}], "published": "2026-07-21T18:16:59.663", "references": [{"url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rcmc-q9rj-4wmq", "source": "security-advisories@github.com"}, {"url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rcmc-q9rj-4wmq", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-269"}, {"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enabling workspace metadata + settings tampering. The `PATCH /workspaces/{workspace_id}` endpoint is gated only by `require_workspace_member(workspace_id)` (default `min_role=\"member\"`). Any member can rewrite the workspace's `name`, `description`, and the `settings` JSON blob. The settings field is a free-form JSON object \u2014 depending on which downstream code reads it, this becomes a configuration-injection primitive for any setting the platform exposes there. PraisonAI Platform version 0.1.4 patches the issue."}, {"lang": "es", "value": "Plataforma PraisonAI es la capa de plataforma para el sistema de equipos multiagente PraisonAI. Las versiones anteriores a la 0.1.4 tienen un bypass de autorizaci\u00f3n que permite la manipulaci\u00f3n de metadatos + configuraciones del espacio de trabajo. El endpoint \u201cPATCH /workspaces/{workspace_id}\u201d est\u00e1 restringido solo por \u201crequire_workspace_member(workspace_id)\u201d (por defecto \u201cmin_role=\u2019member\u2019\u201d). Cualquier miembro puede reescribir el \u201cname\u201d, la \u201cdescription\u201d y el blob JSON de \u201csettings\u201d del espacio de trabajo. El campo de \u201csettings\u201d es un objeto JSON de formato libre - dependiendo de qu\u00e9 c\u00f3digo descendente lo lea, esto se convierte en una primitiva de inyecci\u00f3n de configuraci\u00f3n para cualquier configuraci\u00f3n que la plataforma exponga all\u00ed. La versi\u00f3n 0.1.4 de Plataforma PraisonAI aplica un parche al problema."}], "lastModified": "2026-10-24T19:10:00.127", "sourceIdentifier": "security-advisories@github.com"}