PraisonAI’s issue dependency deletion feature contains an improper authorization control that allows a workspace member to delete dependencies created by an owner through a member‑owned related issue endpoint. The flaw occurs because the route accepts either endpoint and checks delete permission only against the caller‑selected URL issue. Based on the description, it is inferred that an attacker must be an authenticated workspace member with access to the platform to exploit the vulnerability. The impact is the unauthorized removal of issue dependencies, which can compromise the integrity of the issue tracking system and disrupt workflow dependencies.

The vulnerability occurs in the MervinPraison praisonai-platform product. All installations prior to version 0.1.9 are affected; users on 0.1.9 or later are not impacted.

The CVSS score of 6.5 indicates moderate severity, but the EPSS score is not available, making the exploitation likelihood uncertain. Because the flaw requires authenticated access to workspace member accounts, it is considered an in‑app privilege escalation. The vulnerability is not listed in the CISA KEV catalog, suggesting no known large‑scale attacks yet. The likely attack vector is authenticated API or web‑interface use by a member who can call the member‑owned related‑issue endpoint to delete an owner‑created dependency.