CVE-2026-47407
PraisonAI Platform versions before 0.1.4 allow users to access and modify resources belonging to other workspaces, and to promote themselves to higher roles. The flaw arises because the API does not verify that the resource’s workspace matches the URL prefix, and role checks are not enforced. Upgrading to 0.1.4 or later fixes the issue.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Users of PraisonAI Platform running any version earlier than 0.1.4, including administrators and members of workspaces that can register new accounts without email verification.
Real-world impact
An attacker who is a member of one workspace can read, update, or delete data from any other workspace, and can promote themselves to admin or owner, potentially compromising all data and control within the platform.
Why this severity
The CVSS score of 9.4 reflects the combination of high confidentiality, integrity, and availability impact, along with the ability to elevate privileges and bypass authentication checks. The vulnerability allows an attacker to gain full control over other workspaces and the entire platform, justifying the critical rating.
What to do about it
- 01Upgrade PraisonAI Platform to version 0.1.4 or later.
- 02Verify that the new version is running by checking the platform’s version endpoint or release notes.
- 03Restart the platform service to ensure the updated code is active.
NVD-referenced vendor advisory
Timeline
- Jul 21, 2026 · 11d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 21, 2026 · 11d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.