PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization

🗓️ 15 Oct 2026 10:22:53Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 2 Views

PraisonAI platform members can rewrite shared labels without owner/admin authorization.

Reporter	Title	Published	Views	Family All 16
attackerkb	CVE-2026-61440	15 Jul 202611:25	–	attackerkb
CVE	CVE-2026-61440	15 Jul 202611:25	–	cve
Cvelist	CVE-2026-61440 PraisonAI Platform before 0.1.9 Authorization Bypass via Label Endpoints	15 Jul 202611:25	–	cvelist
EUVD	EUVD-2026-44644	8 Oct 202621:58	–	euvd
Github Security Blog	Duplicate Advisory: PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization	15 Jul 202612:32	–	github
Github Security Blog	PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization	8 Oct 202621:58	–	github
Mend	CVE-2026-61440	15 Jul 202611:25	–	mend
NVD	CVE-2026-61440	15 Jul 202612:18	–	nvd
osv-ghsa	GHSA-XXGV-VGVJ-QVXH PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization	8 Oct 202621:58	–	osv-ghsa
osv-pysec	PYSEC-2026-4264 PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization	15 Oct 202610:22	–	osv-pysec

Vulners

Node

Source	Link
github	www.github.com/MervinPraison/PraisonAI/security/advisories/GHSA-xxgv-vgvj-qvxh
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-61440
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-62180
github	www.github.com/MervinPraison/PraisonAI/commit/846568c7a5d8ce9e71e56e4c213f027c04909753
github	www.github.com/MervinPraison/PraisonAI
vulncheck	www.vulncheck.com/advisories/praisonai-platform-before-authorization-bypass-via-label-endpoints
pypi	www.pypi.org/project/praisonai-platform
github	www.github.com/advisories/GHSA-xxgv-vgvj-qvxh

15 Oct 2026 14:38Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.5

CVSS 47.1

EPSS0.00376

SSVC