The vulnerability in PraisonAI Platform enables any workspace member to delete an entire workspace due to an authorization bypass. The DELETE /workspaces/{workspace_id} endpoint is gated only by require_workspace_member(workspace_id) (default min_role='member'), so any member can issue a single DELETE request. This action removes all projects, issues, comments, agents, labels, and member records in the workspace. Versions prior to 0.1.4 are affected. There is no owner‑role check, confirmation token, soft‑delete window, or recovery path, so the operation is destructive and irreversible.

MervinPraison’s PraisonAI Platform, versions prior to 0.1.4, is affected. The fix was introduced in version 0.1.4, thereby protecting all subsequent releases.

The flaw carries a CVSS score of 8.1, indicating high severity. The EPSS score is below 1%, suggesting a low probability of exploitation at this time. The vulnerability is not listed in the CISA KEV catalog. An attacker would only need to be a member of the target workspace to send a single DELETE request, making the attack path straightforward once initial access is achieved. However, the absence of advanced safeguards makes the potential impact catastrophic for affected workspaces.