MervinPraison praisonai-platform up to 0.1.3 Comment Endpoints require_workspace_member workspace_id/issue_id resource injection

Summaryinfo

A vulnerability has been found in MervinPraison praisonai-platform up to 0.1.3 and classified as critical. This vulnerability affects the function require_workspace_member of the component Comment Endpoints. The manipulation of the argument workspace_id/issue_id leads to resource injection. This vulnerability is traded as CVE-2026-47417. It is possible to initiate the attack remotely. There is no exploit available.

Detailsinfo

A vulnerability, which was classified as critical, has been found in MervinPraison praisonai-platform up to 0.1.3. This issue affects the function require_workspace_member of the component Comment Endpoints. The manipulation of the argument workspace_id/issue_id with an unknown input leads to a resource injection vulnerability. Using CWE to declare the problem leads to CWE-99. The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The comment endpoints (`POST /workspaces/{workspace_id}/issues/{issue_id}/comments` and `GET .../comments`) gate access on `require_workspace_member(workspace_id)` only, then call `CommentService.create(issue_id=issue_id, ...)` and `CommentService.list_for_issue(issue_id)` without verifying that `issue_id` belongs to `workspace_id`. A user who is a member of any workspace `W1` can read every comment on, and post new comments to, any issue in any other workspace `W2`. PraisonAI Platform version 0.1.4 patches the issue.

It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2026-47417 since 05/19/2026. The exploitation is known to be easy. The attack may be initiated remotely. Technical details of the vulnerability are known, but there is no available exploit.

Upgrading to version 0.1.4 eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• MervinPraison

Name

• praisonai-platform

Version

• 0.1.0
• 0.1.1
• 0.1.2
• 0.1.3

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion