high
praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDOR
GHSA-cp4f-5m9r-5jc2 · CVE-2026-47417
high
praisonai-platform: Project endpoints accept any project_id without workspace ownership check, cross-workspace read/update/delete IDOR
GHSA-943m-6wx2-rc2j · CVE-2026-47418
critical
praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}
GHSA-c2m8-4gcg-v22g · CVE-2026-47416
high
praisonai-platform: Missing authorization on member removal enables full workspace takeover by any user regardless of role
GHSA-w388-2392-px73 · CVE-2026-47409
high
praisonai-platform: Label endpoints' unchecked label_id/issue_id enable cross-workspace label IDOR (edit, delete, link)
GHSA-5jx9-w35f-vp65 · CVE-2026-47414
high
praisonai-platform: IDOR in dependency endpoints allows cross-workspace issue linking, reading, and deletion due to missing ownership checks
GHSA-4x6r-9v57-3gqw · CVE-2026-47406
critical
praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset
GHSA-3qg8-5g3r-79v5 · CVE-2026-47410
high
PraisonAI Platform: Missing role checks let any workspace member become owner and control workspace membership
GHSA-h37g-4h4p-9x97 · CVE-2026-47405
high
PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID
GHSA-6h6v-6m7w-7vxx · CVE-2026-47399
critical
PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation
GHSA-h8q5-cp56-rr65 · CVE-2026-47407
medium
praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownership
GHSA-27p4-pjqv-whgj · CVE-2026-47408
high
PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API
GHSA-gv23-xrm3-8c62 · CVE-2026-48169
high
PraisonAI has an Arbitrary File Write in Python API
GHSA-hvhp-v2gc-268q · CVE-2026-47397
critical
PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution
GHSA-vg22-4gmj-prxw · CVE-2026-47391
high
PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate
GHSA-9cr9-25q5-8prj · CVE-2026-47394
critical
PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)
GHSA-4mr5-g6f9-cfrh · CVE-2026-47392
medium
PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context
GHSA-5cxw-77wg-jrf3 · CVE-2026-47395
critical
PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default
GHSA-8444-4fhq-fxpq · CVE-2026-47393
critical
PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset
GHSA-86qc-r5v2-v6x6 · CVE-2026-47396
medium
PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings
GHSA-5c6w-wwfq-7qqm · CVE-2026-47390
