CVE-2026-47416— MervinPraison PraisonAI 权限许可和访问控制问题漏洞

praisonai-platform: Any workspace member can promote themselves (or any other member) to owner via PATCH /workspaces/{id}/members/{user_id}

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 are vulnerable to vertical privilege escalation. The `PATCH /workspaces/{workspace_id}/members/{user_id}` endpoint is gated by `require_workspace_member(workspace_id)`, which defaults to `min_role="member"` and is never overridden by the route. The handler then calls `MemberService.update_role(workspace_id, user_id, body.role)` which sets the target member's role to whatever the request body specifies, with no check that the caller has owner-or-admin privilege, no check that the new role is not higher than the caller's own, and no check that the caller is not silently promoting themselves. PraisonAI Platform version 0.1.4 patches the issue.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

特权管理不恰当

MervinPraison PraisonAI 权限许可和访问控制问题漏洞

MervinPraison PraisonAI是MervinPraison个人开发者的 MervinPraison PraisonAI 0.1.4之前版本存在安全漏洞，该漏洞源于对PATCH /workspaces/{workspace_id}/members/{user_id}端点的权限检查缺失，可能导致垂直权限提升。

N/A

N/A