PraisonAI Platform is the platform layer for the PraisonAI multi‑agent teams system. Versions prior to 0.1.4 have an authorization bypass that enables workspace metadata and settings tampering. The PATCH /workspaces/{workspace_id} endpoint is gated only by require_workspace_member(workspace_id) with a default minimum role of "member". Any member can rewrite the workspace’s name, description, and the free‑form settings JSON blob, which becomes a configuration‑injection primitive for any setting the platform exposes there. Version 0.1.4 patches the issue.

The affected product is MervinPraison’s PraisonAI Platform. Versions older than 0.1.4 are vulnerable. The 0.1.4 release patches the problem by tightening authorization checks for workspace modifications.

With a CVSS score of 6.5 the issue is considered moderate severity. The EPSS score of less than 1% indicates a very low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. An exploit requires an authenticated member account; no privilege escalation is needed beyond the member role. Although the attack surface is limited to workspace members, widespread exposure could enable large‑scale metadata tampering if many users have member access.