MervinPraison praisonai-platform up to 0.1.3 CRUD endpoint /workspaces/W1/agents AgentService.get agent_id resource injection

Summaryinfo

A vulnerability was found in MervinPraison praisonai-platform up to 0.1.3. It has been classified as critical. Impacted is the function AgentService.get of the file /workspaces/W1/agents of the component CRUD endpoint. This manipulation of the argument agent_id causes resource injection. This vulnerability is handled as CVE-2026-47419. The attack can be initiated remotely. There is not any exploit available.

Detailsinfo

A vulnerability has been found in MervinPraison praisonai-platform up to 0.1.3 and classified as critical. Affected by this vulnerability is the function AgentService.get of the file /workspaces/W1/agents of the component CRUD endpoint. The manipulation of the argument agent_id with an unknown input leads to a resource injection vulnerability. The CWE definition for the vulnerability is CWE-99. The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an* Insecure Direct Object Reference. The agent CRUD endpoints (`GET / PATCH / DELETE /workspaces/{workspace_id}/agents/{agent_id}`) gate access on `require_workspace_member(workspace_id)` only, then resolve `agent_id` through `AgentService.get(agent_id)` which is a primary-key lookup with no workspace constraint. A user who is a member of any workspace `W1` can read, modify, or delete agents that belong to a different workspace `W2` by guessing or harvesting an agent UUID and calling `…/workspaces/W1/agents/<W2-agent-id>`. PraisonAI Platform version 0.1.4 patches the issue.

The advisory is shared at github.com. This vulnerability is known as CVE-2026-47419 since 05/19/2026. The exploitation appears to be easy. The attack can be launched remotely. Technical details are known, but no exploit is available.

Upgrading to version 0.1.4 eliminates this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• MervinPraison

Name

• praisonai-platform

Version

• 0.1.0
• 0.1.1
• 0.1.2
• 0.1.3

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion