Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/29 10:42 p.m.20 views

GHSA-H37G-4H4P-9X97 PraisonAI Platform: Missing role checks let any workspace member become owner and control workspace membership

Summary PraisonAI Platform has a broken workspace authorization check that allows any authenticated low-privilege workspace member to escalate their own role to owner. The issue is caused by privileged workspace-management routes using the shared dependency requireworkspacemember... without...

8.8CVSS5.8AI score0.0029EPSS
SaveExploits0References2
Rows per page
Query Builder