PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an issue that allows privilege escalation or cross‑tenant member injection. The POST /workspaces/{workspace_id}/members endpoint is gated only by require_workspace_member(workspace_id) with a default min_role of "member", and forwards the request body's user_id and role directly to MemberService.add(workspace_id, user_id, role), which lacks any caller‑permission check. A user with the lowest workspace privilege can add any user, including a new attacker‑controlled account or an existing account to be griefed, as an owner of the workspace. Version 0.1.4 patches the issue.

Versions prior to 0.1.4 of PraisonAI Platform, released by MervinPraison, are affected. Users of any such version that expose the POST /workspaces/{id}/members endpoint can add arbitrary owners. Upgrading to 0.1.4 or later eliminates the flaw.

The CVSS score of 9.6 classifies the issue as critical. The EPSS score of less than 1% indicates a very low but non‑zero likelihood of exploitation, possibly reflecting the recency of the discovery. The vulnerability is not listed in CISA KEV. Attackers can exploit the flaw with a normal workspace membership; they need only authenticate as a member to add an arbitrary owner, making the attack surface relatively broad within any workspace. Thus, the risk remains high for environments that use earlier releases.