The vulnerability in PraisonAI Platform API (before version 0.1.4) consists of two authorization bypass issues. First, the service layer for issues and projects performs global primary-key lookups without validating workspace ownership, enabling authenticated users to read, modify, or delete resources in any workspace by swapping UUIDs in API requests. Second, member management endpoints only require a minimum role of 'member' to perform critical actions such as adding, updating roles, or removing members, allowing any workspace member to escalate their privileges to owner and remove the original owner. The root cause is that while the route layer verifies workspace membership, the service layer ignores workspace scope and caller role checks. These combined flaws allow low-privilege members to steal data from and take over any workspace they belong to. The issue is fixed in version 0.1.4.

An attacker with low privileges in one workspace can access, modify, and delete data in any workspace by manipulating resource identifiers. They can also escalate their privileges within any workspace they belong to by promoting themselves to owner and removing the original owner. This breaks workspace isolation and compromises confidentiality, integrity, and availability of workspace data and membership controls.

Upgrade to PraisonAI Platform API version 0.1.4 or later, which patches these authorization bypass issues. No other mitigation is indicated as the fix addresses the root cause in the service layer authorization logic.