The PraisonAI Platform server versions before 0.1.4 expose API endpoints under /api/v1/workspaces/{workspace_id}/ that rely on a FastAPI dependency to check if the caller is a member of the workspace_id in the URL prefix. However, the inner resource identifiers (e.g., agent_id, issue_id) are looked up by primary key without verifying that these resources belong to the workspace in the URL. This flaw allows a user to access resources from other workspaces by specifying their own workspace in the URL prefix and another workspace's resource ID in the path, bypassing authorization. Furthermore, member-management routes inherit a default minimum role of 'member' without enforcing role hierarchy, allowing any member to promote themselves to admin or owner, demote or remove other members, and delete the workspace. The platform's open registration endpoint requires no email verification, facilitating easy unauthorized account creation. The default server binding to 0.0.0.0:8000 exposes the service to unauthenticated network access. These combined issues constitute a critical security vulnerability. The issue is fixed in PraisonAI Platform version 0.1.4.

An attacker who is a member of any workspace can access, modify, or delete resources belonging to other workspaces by exploiting the improper validation of resource ownership. Additionally, any workspace member can escalate their privileges to admin or owner, allowing them to remove other members, change roles, or delete the entire workspace. The open registration without email verification and default server binding to all network interfaces allows an attacker to easily create accounts and exploit these flaws remotely. This can lead to unauthorized data access, privilege escalation, and workspace destruction.

Upgrade PraisonAI Platform to version 0.1.4 or later, where these privilege management issues are fixed. Until then, restrict network access to the server to trusted users only and disable open registration if possible. Review and enforce role hierarchy checks in member-management routes and ensure resource ownership validation matches the workspace context. Patch status is not explicitly stated but version 0.1.4 is identified as the fixed version.