1 matches found
CVE-2026-47419: Authorization Bypass Through User-Controlled Key
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The agent CRUD endpoints GET / PATCH / DELETE /workspaces/workspaceid/agents/agentid gate access on requireworkspacememberworkspaceid only, then...
8.3CVSS5.8AI score0.00388EPSS
SaveExploits0References2
20