The PraisonAI Platform has an insecure direct object reference vulnerability in versions before 0.1.4. The endpoint GET /workspaces/{workspace_id}/issues/{issue_id}/activity is protected by a check ensuring the user is a member of the specified workspace, but the underlying database query does not restrict results by workspace. As a result, any user who is a member of any workspace can retrieve activity logs for issues in any workspace, bypassing intended authorization boundaries. This vulnerability is identified as CWE-639 (Authorization Bypass Through User-Controlled Key). The issue is resolved in version 0.1.4.

An attacker who is a member of any workspace can read the full activity logs of issues in all workspaces within the multi-tenant deployment. This leads to unauthorized disclosure of potentially sensitive activity data. There is no indication of impact on data integrity or availability. The CVSS score is 6.5 (medium severity), reflecting network attack vector, low attack complexity, and no user interaction required.

Upgrade PraisonAI Platform to version 0.1.4 or later, where this authorization bypass vulnerability has been fixed. No other official remediation or temporary fixes are documented. Until the upgrade, restrict user membership to trusted users only to limit exposure.