The PraisonAI Platform implements member removal through the DELETE /workspaces/{workspace_id}/members/{user_id} endpoint. The action is protected only by a check that the caller is a workspace member, regardless of their role. Because there is no check for the caller's privilege level, any member—including non‑owners—can delete any other member, including the workspace owner. The missing target‑role validation and the absence of a restriction against removing the last owner create an authorization bypass that can lead to owner lockout, removal of critical team members, and disruption of workspace operations. This flaw is categorized as a role‑based access control violation (CWE‑269) and an authorization check failure (CWE‑862).

The vulnerability affects the PraisonAI Platform supplied by MervinPraison. All releases prior to version 0.1.4 are vulnerable; the issue was addressed in release 0.1.4. Users running earlier versions should verify their current version and plan an upgrade.

The CVSS score of 8.1 indicates a high level of severity. The EPSS score of less than 1% suggests that the probability of real‑world exploitation is low at the moment, and the vulnerability is not listed in CISA’s KEV catalog. However, the flaw can be exercised by any authenticated workspace member, so an attacker who gains access to a member account can immediately remove the owner, potentially causing denial of service to the workspace. The lack of a mandatory role check makes the vulnerability straightforward to exploit once a member is authenticated.