The vulnerability in PraisonAI prior to version 0.1.7 arises from improper validation of the project_id parameter in issue create and update API requests. Specifically, the system fails to verify that the project_id belongs to the workspace indicated in the request URL. This authorization bypass enables an attacker with limited privileges to reference projects from other tenants, causing cross-tenant data pollution in aggregated project statistics. This issue is classified as CWE-639 and has a moderate severity rating. No patch or official fix information is provided in the available data.

An attacker with limited privileges can create or update issues referencing projects outside their authorized workspace, resulting in cross-tenant data pollution. This can affect the integrity of project statistics aggregation by mixing data from different tenants, potentially leading to inaccurate reporting or analysis. There is no indication of direct data disclosure or system compromise beyond data pollution. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict issue creation and update operations to trusted users and monitor for anomalous cross-workspace references if possible.