CVE-2026-48169Disclosure

LOWCVSS 8.8 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

PraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the PraisonAI Platform API have two authorization failures that together break workspace isolation. The service layer for issues and projects performs global primary-key lookups without checking workspace ownership, so any authenticated user can read, modify, and delete resources in any workspace just by swapping UUIDs in their API requests. On top of that, every member management endpoint (add, update role, remove) only requires `min_role="member"`, which lets any workspace member promote themselves to owner and kick out the original owner. A low-privilege member of one workspace can steal data from every other workspace and take over any workspace they belong to. Both issues come from the same gap: the route layer pulls `workspace_id` from the URL and verifies membership, but the service layer ignores the workspace scope for resource lookups and ignores the caller's role level for member operations. The `require_workspace_member()` dependency does its job correctly. The problem is that the service layer doesn't use the information it provides. Version 0.1.4 of the PraisonAI Platform API patch the issue.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-639CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
Disclosure: 2 classified signals
General: 1 classified signal
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets2 URLs

By indicator

Full discourse3 posts

CyberSignal | Cybersecurity News@XQOPTRX45d
Disclosure
🤖 PraisonAI flaw breaks workspace isolation A security issue in PraisonAI Platform API could allow a low-privilege authenticated user to access or alter resources belonging to other workspaces by manipulating identifiers. Tracked as CVE-2026-48169, it affects versions before 0.1.4. ⚠️ CVE published August 7; receiving new security coverage August 8. 🔎 Source: TheHackerWire #AISecurity #PraisonAI #APIsecurity #CVE #CyberSecurity
Post summary
The post announces CVE‑2026‑48169, a privilege‑escalation flaw in PraisonAI allowing low‑privileged users to traverse workspace boundaries by manipulating identifiers.
0000039
34 followersView on X
Infoflowcloud@infoflowcloud46d
General
🚨*CVE* CVE-2026-48169 PraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the PraisonAI Platform API have two authorization failures that together break workspace isolation… https://www.cve.org/CVERecord?id=CVE-2026-48169 ----- Traducción: CVE-2026-48169 Pra… http://infoflow.cloud`
Post summary
The post identifies CVE‑2026‑48169, noting that earlier versions of PraisonAI’s Platform API suffer two auth failures that break workspace isolation, but it does not provide a PoC, exploit, patch, or evidence of active exploitation.
0000043
98 followersView on X
CVE@CVEnew46d
Disclosure
CVE-2026-48169 PraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the PraisonAI Platform API have two authorization failures that together break workspace isolation… https://www.cve.org/CVERecord?id=CVE-2026-48169
Post summary
The post identifies CVE-2026-48169, noting that early versions of PraisonAI suffer from two authorization failures that compromise workspace isolation, but it provides no evidence of exploitation, PoC, or mitigation.
000001.2K
57.9K followersView on X

Explore more

Back to dashboard