PraisonAI’s platform DELETE endpoints lacked an ownership or role validation, allowing any workspace member to permanently remove projects, agents, issues, labels, and related attachments. The flaw permits a single malicious or compromised account to wipe an entire workspace’s content irreversibly, causing loss of critical data and potentially disrupting ongoing collaborative work.

The vulnerability affects the praisonai-platform component of MervinPraison’s PraisonAI system in releases ranging from version 0.1.4 up to, but not including, version 0.1.5. Any workspace member using these versions could delete resources owned by the workspace owner or other members. The issue was addressed and patched in version 0.1.5.

With a CVSS score of 8.1, the flaw is considered high severity. No EPSS score is available, preventing an exact assessment of exploitation likelihood, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is internal, requiring a valid workspace member account; once possessed, the attacker can target any resource within that workspace through the Delete endpoints.