CVE-2026-47405

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have a broken workspace authorization check that allows any authenticated low-privilege workspace member to escalate their own role to owner. The issue is caused by privileged...

CVE-2026-47405

CVE-2026-47405 covers PraisonAI Platform where a broken workspace authorization check uses require_workspace_member with default min_role="member", enabling any authenticated low‑privilege workspace member to self‑promote to owner and alter workspace membership. Connected docs confirm this affect...

CVE-2026-47405

creationtimestamp| type| source ---|---|--- 2026-05-19 06:35:48+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-h37g-4h4p-9x97 2026-07-21 19:20:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6jpyp4ua2j...