MervinPraison praisonai-platform up to 0.1.3 MemberService MemberService.add user_id/role privileges management

Summaryinfo

A vulnerability classified as problematic was found in MervinPraison praisonai-platform up to 0.1.3. Affected by this vulnerability is the function MemberService.add of the component MemberService. Such manipulation of the argument user_id/role leads to privileges management. This vulnerability is documented as CVE-2026-47413. The attack can be executed remotely. There is not any exploit available.

Detailsinfo

A vulnerability was found in MervinPraison praisonai-platform up to 0.1.3. It has been rated as problematic. Affected by this issue is the function MemberService.add of the component MemberService. The manipulation of the argument user_id/role with an unknown input leads to a privileges management vulnerability. Using CWE to declare the problem leads to CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Impacted is integrity, and availability. CVE summarizes:

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have aprivilege escalation / cross-tenant member injection. The `POST /workspaces/{workspace_id}/members` endpoint is gated only by `require_workspace_member(workspace_id)` (default `min_role="member"`) and forwards the request body's `user_id` and `role` straight into `MemberService.add(workspace_id, user_id, role)`, which has no caller-permission check. A user with the lowest workspace privilege can add any user (including a new attacker-controlled second account, or an existing account they want to grief) as owner of the workspace. PraisonAI Platform version 0.1.4 patches the issue.

The advisory is shared for download at github.com. This vulnerability is handled as CVE-2026-47413 since 05/19/2026. The exploitation is known to be easy. The attack may be launched remotely. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1068.

Upgrading to version 0.1.4 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• MervinPraison

Name

• praisonai-platform

Version

• 0.1.0
• 0.1.1
• 0.1.2
• 0.1.3

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion