SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-47405

HIGH · CVSS 8.8 EPSS 0.29% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-21 · Last synced 2026-08-20

CyberRota Analysis

AI-Generated

The PraisonAI Platform prior to version 0.1.4 is vulnerable due to a broken workspace authorization check, allowing low-privilege members to escalate their roles to `owner`. This vulnerability enables unauthorized users to manipulate workspace memberships, including adding or removing users and performing destructive operations. Organizations utilizing the PraisonAI Platform should prioritize patching to version 0.1.4 to mitigate the risk of privilege escalation and potential workspace takeover.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-47405
Severity
HIGH
CVSS
8.8
EPSS
0.29%

Original NVD Description

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have a broken workspace authorization check that allows any authenticated low-privilege workspace member to escalate their own role to `owner`. The issue is caused by privileged workspace-management routes using the shared dependency `require_workspace_member(...)` without requiring `admin` or `owner`. The dependency defaults to `min_role="member"`, so routes that should be administrative are accessible to ordinary workspace members. As a result, a normal workspace member can promote their own account from `member` to `owner`; add arbitrary users as `owner` or `admin`; change other members' roles; remove legitimate owners or members; take over workspace membership completely; and/or perform destructive workspace operations after escalation. This is a broken access control / vertical privilege escalation vulnerability. PraisonAI Platform version 0.1.4 patches the issue.