CVE-2026-47405: CWE-284: Improper Access Control in MervinPraison praisonai-platform
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have a broken workspace authorization check that allows any authenticated low-privilege workspace member to escalate their own role to `owner`. The issue is caused by privileged workspace-management routes using the shared dependency `require_workspace_member(...)` without requiring `admin` or `owner`. The dependency defaults to `min_role="member"`, so routes that should be administrative are accessible to ordinary workspace members. As a result, a normal workspace member can promote their own account from `member` to `owner`; add arbitrary users as `owner` or `admin`; change other members' roles; remove legitimate owners or members; take over workspace membership completely; and/or perform destructive workspace operations after escalation. This is a broken access control / vertical privilege escalation vulnerability. PraisonAI Platform version 0.1.4 patches the issue.
AI Analysis
Technical Summary
CVE-2026-47405 is a broken access control vulnerability in the PraisonAI Platform (MervinPraison) affecting versions before 0.1.4. The root cause is that privileged workspace-management routes rely on a shared authorization dependency requiring only a minimum role of 'member' rather than 'admin' or 'owner'. This flaw allows any authenticated workspace member to escalate their privileges to owner, manipulate workspace membership and roles arbitrarily, and perform destructive actions. The vulnerability is classified under CWE-284 (Improper Access Control) and CWE-862 (Missing Authorization). The issue is fixed in version 0.1.4.
Potential Impact
An attacker with any authenticated workspace member account can escalate their privileges to owner, granting full control over the workspace. This includes adding or removing owners and admins, changing roles of other members, and executing destructive operations. The impact affects confidentiality, integrity, and availability of workspace data and membership. The CVSS 3.1 score is 8.8 (high), reflecting network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Upgrade PraisonAI Platform to version 0.1.4 or later, which patches the broken access control vulnerability. No other mitigations are specified. Patch status is not explicitly stated but the vendor fixed the issue in version 0.1.4.
CVE-2026-47405: CWE-284: Improper Access Control in MervinPraison praisonai-platform
Description
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have a broken workspace authorization check that allows any authenticated low-privilege workspace member to escalate their own role to `owner`. The issue is caused by privileged workspace-management routes using the shared dependency `require_workspace_member(...)` without requiring `admin` or `owner`. The dependency defaults to `min_role="member"`, so routes that should be administrative are accessible to ordinary workspace members. As a result, a normal workspace member can promote their own account from `member` to `owner`; add arbitrary users as `owner` or `admin`; change other members' roles; remove legitimate owners or members; take over workspace membership completely; and/or perform destructive workspace operations after escalation. This is a broken access control / vertical privilege escalation vulnerability. PraisonAI Platform version 0.1.4 patches the issue.
CVSS v3.1
Score 8.8high
Affected software
pkg:github/mervinpraison/PraisonAIRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-47405 is a broken access control vulnerability in the PraisonAI Platform (MervinPraison) affecting versions before 0.1.4. The root cause is that privileged workspace-management routes rely on a shared authorization dependency requiring only a minimum role of 'member' rather than 'admin' or 'owner'. This flaw allows any authenticated workspace member to escalate their privileges to owner, manipulate workspace membership and roles arbitrarily, and perform destructive actions. The vulnerability is classified under CWE-284 (Improper Access Control) and CWE-862 (Missing Authorization). The issue is fixed in version 0.1.4.
Potential Impact
An attacker with any authenticated workspace member account can escalate their privileges to owner, granting full control over the workspace. This includes adding or removing owners and admins, changing roles of other members, and executing destructive operations. The impact affects confidentiality, integrity, and availability of workspace data and membership. The CVSS 3.1 score is 8.8 (high), reflecting network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Upgrade PraisonAI Platform to version 0.1.4 or later, which patches the broken access control vulnerability. No other mitigations are specified. Patch status is not explicitly stated but the vendor fixed the issue in version 0.1.4.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-05-19T19:37:43.525Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a5fa1742a4a8d59896d3444
Added to database: 07/21/2026, 16:42:28 UTC
Last enriched: 07/21/2026, 16:56:45 UTC
Last updated: 07/21/2026, 20:03:04 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.