Threats Tagged 'cve-2026-47407'
View all threats tagged with 'cve-2026-47407'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-47407'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-47407 is a critical improper privilege management vulnerability in the PraisonAI Platform prior to version 0.1.4. The platform incorrectly authorizes users based on workspace membership in the URL prefix without verifying that the inner resource belongs to that workspace, allowing cross-tenant resource access. Additionally, member-management routes fail to enforce role hierarchy, enabling any member to escalate privileges to admin or owner, modify other members, or delete the workspace. The platform allows open registration without email verification and binds to all network interfaces by default, enabling easy unauthorized access. Version 0.1.4 patches these issues. Join the discussion | CVE Database V5 | 07/21/2026, 16:42:33 UTC Added: 07/21/2026, 17:12:25 UTC |
Showing 1 to 1 of 1 result