The PraisonAI Platform server before version 0.1.4 exposes a critical privilege management flaw where authorization checks only verify that the user is a member of the workspace specified in the URL prefix but do not confirm that the resource being accessed belongs to that workspace. This allows users to access, modify, or delete resources from other workspaces by manipulating the resource ID in the URL path. Furthermore, member-management API routes inherit a default minimum role of 'member' without enforcing the role hierarchy, permitting any basic member to escalate their privileges to admin or owner, demote or remove other members, and delete the workspace. The platform's open registration endpoint requires no email verification, and the default server binding to 0.0.0.0:8000 allows network-wide access, facilitating easy exploitation. These vulnerabilities are addressed in PraisonAI Platform version 0.1.4.

An attacker who is a member of any workspace can access or manipulate resources belonging to other workspaces by exploiting the lack of resource-to-workspace validation. They can also escalate their privileges within a workspace to admin or owner, remove or demote other members, or delete the workspace entirely. The open registration without email verification and default server binding to all interfaces enable attackers to register and exploit these flaws remotely without prior authentication. This leads to unauthorized data access, privilege escalation, and potential workspace destruction.

Upgrade to PraisonAI Platform version 0.1.4 or later, which patches these privilege management vulnerabilities. Until upgraded, restrict network access to the platform server to trusted users only. Since no official patch links or advisories are provided beyond the version fix, verify with the vendor for any additional mitigation guidance.