Vulnerabilities

Security fix · CVE-2026-47407

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.

Published Jul 21, 2026 · catalog updated Oct 24, 2026 · PraisonAI Platform is the

Open the advisory

Exploitation likelihood is not on this record for CVE-2026-47407. A missing EPSS score is not a low risk. Compare PraisonAI Platform is the with the linked advisory before you change production.

Severity

Critical9.4

Known exploitation

Not in CISA/VulnCheck KEV

EPSS

Not in the current FIRST EPSS dataset

Remediation

Advisory link

Affected products

See sources for product scope

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, the Platform server exposes resources under and protects them with a FastAPI dependency. The dependency only checks that the caller is a member of the workspace_id in the URL prefix. The route handlers then look up the inner resource ( , , , , , ) by primary key alone. The resource's own is never compared to the URL's . A user can therefore put their own workspace in the URL prefix and any other workspace's resource ID in the path. The auth check passes, since they really are a member of the prefix workspace. The service then returns the cross-tenant resource for read, update, or delete. There is a second bug in the member-management routes ( , , , , ). Each one inherits the default from . Any basic member can therefore promote themselves to admin or owner, demote or remove other members, and delete the workspace. The role hierarchy exists in the schema but is not enforced. Registration is open at with no email verification. The default server bind is ( ). One curl from any unauthenticated network position is enough to bootstrap into the system. PraisonAI Platform version 0.1.4 patches the issue.

No affected version ranges are stored yet. Use the vendor advisory before you decide this record does not apply.