Lucene search
+L

16 matches found

OSV
OSV
added 2026/07/13 3:35 p.m.6 views

PYSEC-2026-2936 PraisonAI Platform: Missing role checks let any workspace member become owner and control workspace membership

Summary PraisonAI Platform has a broken workspace authorization check that allows any authenticated low-privilege workspace member to escalate their own role to owner. The issue is caused by privileged workspace-management routes using the shared dependency requireworkspacemember... without...

8.8CVSS6.1AI score0.0029EPSS
SaveExploits0References5
Rows per page
Query Builder