Lucene search
+L

3 matches found

NVD
NVD
added 2026/07/21 5:17 p.m.15 views

CVE-2026-47407

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, the Platform server exposes resources under /api/v1/workspaces/workspaceid/... and protects them with a requireworkspacememberworkspaceid FastAPI dependency. The dependency only checks tha...

9.4CVSS0.00414EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/29 12:00 a.m.29 views

PT-2026-53558

Summary The Platform server exposes resources under /api/v1/workspaces/workspace id/... and protects them with a require workspace memberworkspace id FastAPI dependency. The dependency only checks that the caller is a member of the workspace id in the URL prefix. The route handlers then look up t...

9.4CVSS5.7AI score0.00414EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/05/29 12:00 a.m.28 views

PT-2026-45061

Name of the Vulnerable Software and Affected Versions PraisonAI Platform affected versions not specified Description The server contains multiple authorization flaws. First, a cross-tenant Insecure Direct Object Reference IDOR exists because the require workspace member dependency only validates...

9.4CVSS5.8AI score0.00414EPSS
SaveExploits0References9
Rows per page
Query Builder