DailyCVE@dailycve
🔴 PraisonAI Platform, Inadequate Authorization, #CVE-2026-62179 (High) -DC-Oct2026-2977 https://dailycve.com/praisonai-platform-inadequate-authorization-cve-2026-62179-high-dc-oct2026-2977/
0000021
239 followersView on X
CVE-2026-62179
LOWCVSS 6.5 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
PraisonAI is a multi-agent teams system. In `praisonai-platform` prior to version 0.1.9, issue dependency deletion can be authorized against the wrong side of a dependency edge. A workspace member cannot delete a dependency through the owner-created issue endpoint, but can delete the same dependency through a member-owned related issue endpoint because the route accepts either endpoint and checks delete permission only against the caller-selected URL issue. Version 0.1.9 patches the issue.
0.0/ 10 priority
Sources & remediation
Weakness type (CWE)
CWE-862CWE-863
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day