CVE-2026-47419

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an* Insecure Direct Object Reference. The agent CRUD endpoints (`GET / PATCH / DELETE /workspaces/{workspace_id}/agents/{agent_id}`) gate access on `require_workspace_member(workspace_id)` only, then resolve `agent_id` through `AgentService.get(agent_id)` which is a primary-key lookup with no workspace constraint. A user who is a member of any workspace `W1` can read, modify, or delete agents that belong to a different workspace `W2` by guessing or harvesting an agent UUID and calling `…/workspaces/W1/agents/<W2-agent-id>`. PraisonAI Platform version 0.1.4 patches the issue.

• CWE-639

• https://github.com/MervinPraison/PraisonAI/commit/ef79b7a0561796ad9807f0f09538c25cc78d3619
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-7p8g-6c6g-h9w7
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-7p8g-6c6g-h9w7

Published

Jul 21, 2026

Last Modified

Jul 22, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-47413PraisonAI Platform is the platform layer for the PraisonAI m…9.6
• CVE-2026-47414PraisonAI Platform is the platform layer for the PraisonAI m…7.6
• CVE-2026-47415PraisonAI Platform is the platform layer for the PraisonAI m…8.3
• CVE-2026-47416PraisonAI Platform is the platform layer for the PraisonAI m…9.6
• CVE-2026-47417PraisonAI Platform is the platform layer for the PraisonAI m…8.1
• CVE-2026-47418PraisonAI Platform is the platform layer for the PraisonAI m…8.1
• CVE-2026-4742Inconsistent Interpretation of HTTP Requests ('HTTP Request/…2.9
• CVE-2026-47422Frappe is a full-stack web application framework. Prior to 1…5.3
• CVE-2026-47423DOMPurify is a DOM-only cross-site scripting sanitizer for H…8.2
• CVE-2026-47425Rattler is a library that provides common functionality used…6.9
• CVE-2026-47427GitHub MCP Server is GitHub's official MCP Server. Prior to …7.5
• CVE-2026-47428Vitest is a testing framework powered by Vite. From 4.0.17 u…9.6