The PraisonAI Platform versions before 0.1.4 suffer from an insecure direct object reference vulnerability (CWE-639) where project CRUD endpoints validate access solely based on workspace membership without tying the project lookup to the workspace context. Specifically, the endpoints GET, PATCH, DELETE on /workspaces/{workspace_id}/projects/{project_id} and GET /projects/{project_id}/stats call ProjectService methods that do not enforce workspace constraints. Consequently, a user who is a member of any workspace can access projects belonging to other workspaces, bypassing intended authorization controls. Version 0.1.4 addresses this issue by patching the access control logic.

An attacker with membership in any workspace can read, modify, delete, or view statistics for projects in other workspaces to which they do not belong. This leads to unauthorized data disclosure and modification, violating confidentiality and integrity. The vulnerability does not impact availability. The CVSS 3.1 score is 8.1 (High), reflecting network attack vector, low complexity, required privileges, no user interaction, and high confidentiality and integrity impacts.

Upgrade to PraisonAI Platform version 0.1.4 or later, where the authorization bypass vulnerability has been fixed. Patch status is not explicitly stated but the issue is resolved in version 0.1.4. No additional mitigations are indicated by the vendor advisory.