PraisonAI Platform versions before 0.1.4 contain a systemic object-level authorization flaw in workspace-scoped REST routes. Although the route layer verifies that the caller is a member of the workspace specified in the URL, the service layer fetches or modifies objects solely by their global UUID without confirming that these objects belong to the workspace in the URL. This allows an authenticated user from one workspace to access, modify, or delete objects from another workspace by supplying the victim object's global UUID, violating workspace isolation boundaries. The vulnerability affects routes handling agents, projects, issues, and comments. The issue is fixed in version 0.1.4.

An authenticated user with membership in one workspace can access, modify, or delete objects belonging to other workspaces by exploiting the flawed authorization logic. This leads to a complete breach of workspace isolation, potentially exposing sensitive data and allowing unauthorized modifications across workspace boundaries. The CVSS 3.1 score is 8.8 (High), reflecting network attack vector, low attack complexity, privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Upgrade PraisonAI Platform to version 0.1.4 or later, where this authorization flaw is patched. No other mitigation is documented. Patch status is not explicitly stated as 'official-fix' in the vendor advisory, but the description confirms version 0.1.4 fixes the issue. Therefore, applying this update is the recommended remediation.