2 matches found
CVE-2026-47409: Improper Privilege Management
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enabling owner lockout. The DELETE /workspaces/workspaceid/members/userid endpoint is gated only by requireworkspacememberworkspaceid default minrole="member"...
8.1CVSS5.8AI score0.00525EPSS
SaveExploits0References3
CVE-2026-47412: Improper Privilege Management
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enabling destructive action. The DELETE /workspaces/workspaceid endpoint is gated only by requireworkspacememberworkspaceid default minrole="member". Any membe...
8.1CVSS5.8AI score0.00525EPSS
SaveExploits0References3
20