CVE-2026-47411: Improper Privilege Management

🗓️ 21 Jul 2026 00:00:00Reported by Rapid7Type

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enabling workspace metadata + settings tampering. The PATCH /workspaces/{workspace_id} endpoint is gated only...

Reporter	Title	Published	Views	Family All 12
CVE	CVE-2026-47411	21 Jul 202617:02	–	cve
Cvelist	CVE-2026-47411 praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}	21 Jul 202617:02	–	cvelist
EUVD	EUVD-2026-46329	21 Jul 202617:02	–	euvd
Github Security Blog	praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}	1 Jun 202614:23	–	github
NVD	CVE-2026-47411	21 Jul 202618:16	–	nvd
OSV	GHSA-RCMC-Q9RJ-4WMQ praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}	1 Jun 202614:23	–	osv
OSV	PYSEC-2026-2937 praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}	13 Jul 202615:35	–	osv
Positive Technologies	PT-2026-45484	1 Jun 202600:00	–	ptsecurity
Positive Technologies	PT-2026-59569	13 Jul 202600:00	–	ptsecurity
PyPA	praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}	13 Jul 202615:35	–	pypa