The vulnerability permits any authenticated workspace member to send a PATCH request to /workspaces/{workspace_id}/members/{user_id} that sets another member’s role to owner. The endpoint is only protected by a member check; it does not verify that the caller has owner or admin rights, nor that the new role is no higher than the caller’s own. Consequently an attacker can promote themselves or another user to owner, gaining unrestricted control over workspace resources, including data deletion and manipulation. This is a vertical privilege escalation compounded by an improper authorization check.

Manufactured by MervinPraison under the product PraisonAI Platform, versions prior to 0.1.4 are affected. The issue arises from the PATCH /workspaces/{workspace_id}/members/{user_id} endpoint which is protected only by a minimal member check and lacks any enforcement of owner or admin privileges for role changes.

With a CVSS score of 9.6, this flaw is considered critical. The EPSS score is below 1 %, indicating a low but non‑zero likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Attackers would need to be an authenticated member of a workspace; no additional exploits or zero‑day payloads are required. Thus, the risk is primarily within organizations using the unpatched platform and employing the vulnerable endpoint for membership management.