The PraisonAI Platform's issue management endpoints (`GET`, `PATCH`, `DELETE` on `/workspaces/{workspace_id}/issues/{issue_id}`) enforce access control by verifying membership in the specified workspace (`require_workspace_member(workspace_id)`). However, the issue retrieval uses a primary key lookup (`IssueService.get(issue_id)`) without verifying that the issue belongs to the workspace in context. This allows an authenticated user with membership in any workspace to perform unauthorized operations on issues belonging to other workspaces. The vulnerability is classified as CWE-639 (Authorization Bypass Through User-Controlled Key) and affects versions prior to 0.1.4. The issue is resolved in version 0.1.4.

An attacker who is a member of any workspace can read, modify, or delete issues in other workspaces to which they do not belong. This leads to unauthorized data exposure and modification, impacting confidentiality, integrity, and availability of issue data. The CVSS 3.1 base score is 8.3 (High), reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, high confidentiality and integrity impact, and low availability impact.

Upgrade PraisonAI Platform to version 0.1.4 or later, where this authorization bypass vulnerability has been fixed. No other mitigation or temporary workaround is indicated in the available data.