CVE-2026-61440 describes a missing authorization vulnerability in MervinPraison's PraisonAI platform prior to version 0.1.9. The platform fails to properly restrict label and issue-label mutation operations, enabling any workspace member to rename and recolor shared labels and to add or remove labels on issues created by workspace owners. This unauthorized access occurs via PATCH and POST/DELETE HTTP endpoints, allowing manipulation of shared label taxonomy and issue-label associations without requiring owner or admin privileges.

Attackers with workspace member privileges can alter shared label taxonomy and manipulate issue-label associations without authorization from owners or administrators. This could lead to confusion, mislabeling, or disruption of issue tracking workflows within the affected workspace. The vulnerability does not require user interaction and has a network attack vector with low attack complexity, but requires privileges of a workspace member.

A fix is available in PraisonAI version 0.1.9 and later. Users should upgrade to version 0.1.9 or newer to remediate this vulnerability. Patch status is not explicitly confirmed in the vendor advisory, but the affected versions are clearly stated as prior to 0.1.9. Until upgrading, restrict workspace member privileges or monitor label changes closely as a temporary measure.