CVE-2026-47411

The record

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enabling workspace metadata + settings tampering. The `PATCH /workspaces/{workspace_id}` endpoint is gated only by `require_workspace_member(workspace_id)` (default `min_role="member"`). Any member can rewrite the workspace's `name`, `description`, and the `settings` JSON blob. The settings field is a free-form JSON object — depending on which downstream code reads it, this becomes a configuration-injection primitive for any setting the platform exposes there. PraisonAI Platform version 0.1.4 patches the issue.

Affected packages

Related vulnerabilities

• CVE-2026-63339 IXP Manager is a full-stack web application for managing Internet Exchange Points. CWE-269
• CVE-2026-62990 Shopper is a Headless e-commerce Admin Panel. CWE-269
• CVE-2026-61850 Kargo manages and automates the promotion of software artifacts. CWE-269
• CVE-2026-118205 The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for… CWE-269
• CVE-2026-105894 The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine… CWE-269
• CVE-2026-101213 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege… CWE-269
• CVE-2026-59386 A SpaceSupporter could improperly modify an application's start command and… CWE-269
• CVE-2026-113616 The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset… CWE-269