PraisonAI Platform is the platform layer for PraisonAI’s multi‑agent teams system. Versions prior to 0.1.4 contain a broken workspace authorization check that allows any authenticated low‑privilege workspace member to elevate their role to owner. The flaw arises because privileged workspace‑management routes use the require_workspace_member(...) dependency without requiring admin or owner status; the default minimum role is set to member, which lets ordinary members access administrative functions. As a result, a normal workspace member can promote themselves to owner, add or remove users with privileged roles, change other members' roles, remove legitimate owners or members, and generally take over workspace membership. These actions can lead to destructive operations and total control of the workspace. The vulnerability represents broken access control and vertical privilege escalation. The issue is resolved in version 0.1.4 of the platform.

The vulnerability exists in the PraisonAI Platform, vendor MervinPraison, and affects all releases prior to version 0.1.4. The 0.1.4 release contains the fix; no other versions are listed as addressed.

The CVSS score of 8.8 indicates a high severity. The EPSS score of under 1% suggests a very low probability of exploitation in the wild at the time of this analysis. The vulnerability is not currently listed in CISA’s KEV catalog. Exploitation requires an authenticated user with membership in a workspace; based on the description, the likely attack vector is a legitimate user account that can be used to promote itself and subsequently manipulate workspace membership.