Description
PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization on the PATCH routes for projects, issues, and agents, which only require workspace-member role. A workspace member can modify owner-created records; for projects, a member can reassign lead_id to their own user id and then delete the owner-created project, bypassing the delete route's owner/admin permission check.
Published: 2026-07-11
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

PraisonAI Platform before version 0.1.9 does not enforce owner or admin permissions on the PATCH endpoints for projects, issues, and agents, requiring only a workspace‑member role. This flaw allows a non‑owner user to modify records created by the owner, reassign project lead identifiers, and subsequently delete the project, effectively bypassing the deletion route’s owner/admin check. The result is loss of ownership integrity and potential data loss or unauthorized configuration changes, as described in the CWE-862 “Missing Authorization” weakness.

Affected Systems

MervinPraison PraisonAI Platform, all releases earlier than version 0.1.9 (including 0.1.8 and lower).

Risk and Exploitability

The CVSS score of 7.1 indicates high severity, while the EPSS score is < 1%. The vulnerability is not listed in the CISA KEV catalog. The attack vector is likely through authenticated web API requests; an attacker only needs a workspace member role and the ability to send PATCH requests to the vulnerable routes.

Generated by OpenCVE AI on July 29, 2026 at 09:08 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to PraisonAI 0.1.9 or newer to enable owner/admin authorization on PATCH endpoints.
  • If an upgrade cannot be performed immediately, restrict or remove PATCH permissions for workspace‑member roles on project, issue, and agent routes, or temporarily block these endpoints via API gateway rules.
  • Monitor API logs for unexpected PATCH activity and verify that the authorization filter is active after applying the patch or role restriction.

Generated by OpenCVE AI on July 29, 2026 at 09:08 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 13 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 11 Jul 2026 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Mervinpraison
Mervinpraison praisonai
Vendors & Products Mervinpraison
Mervinpraison praisonai

Sat, 11 Jul 2026 13:30:00 +0000

Type Values Removed Values Added
Description PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization on the PATCH routes for projects, issues, and agents, which only require workspace-member role. A workspace member can modify owner-created records; for projects, a member can reassign lead_id to their own user id and then delete the owner-created project, bypassing the delete route's owner/admin permission check.
Title PraisonAI Platform before 0.1.9 Authorization Bypass via PATCH
First Time appeared Praison
Praison praisonai
Weaknesses CWE-862
CPEs cpe:2.3:a:praison:praisonai:*:*:*:*:*:*:*:*
Vendors & Products Praison
Praison praisonai
References
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L'}

cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N'}

Subscriptions

Mervinpraison Praisonai
Praison Praisonai
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-07-13T17:17:43.342Z

Reserved: 2026-07-09T14:05:47.928Z

Link: CVE-2026-61442

cve-icon Vulnrichment

Updated: 2026-07-13T17:14:10.393Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-29T09:15:05Z

Weaknesses