# CVE-2026-47399: MervinPraison PraisonAI Platform IDOR in workspace-scoped routes

Source: https://junglewise.ai/threats/cve-2026-47399-mervinpraison-praisonai-platform-idor-in-workspace-scoped-routes  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-21. Updated: 2026-07-21  
License: CC BY 4.0 with a link back

CVE-2026-47399 · Severity: high · CVSS 8.8 · Published 2026-07-21

PraisonAI Platform, a system for managing multi-agent AI teams, contains a security flaw that allows users to access data outside of their assigned workspace. An authenticated user can view, modify, or delete sensitive objects like agents, projects, and issues belonging to other organizations by manipulating unique identifiers in web requests. This bypasses the platform's intended isolation between different customers or teams, potentially leading to unauthorized data exposure or loss.

Technologies: [praisonai-platform (PyPI)](https://junglewise.ai/threats/technologies/praisonai-platform). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-47399 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-47399 being exploited in the wild.

**How severe is CVE-2026-47399?** High severity, with a CVSS score of 8.8, published 21 July 2026.

**Which products and versions are affected?** praisonai-platform (PyPI) <= 0.1.2, ECOSYSTEM:introduced=0,fixed=0.1.4.

**Is there a fix for CVE-2026-47399?** Yes. praisonai-platform (PyPI): upgrade to 0.1.4 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-47399 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-47399?** Check whether you run praisonai-platform (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- praisonai-platform (PyPI): upgrade to 0.1.4 or later

  ```sh
  pip install "praisonai-platform>=0.1.4"
  ```


## Technical details

The PraisonAI Platform (prior to version 0.1.4) suffers from an Insecure Direct Object Reference (IDOR) vulnerability due to a failure to bind workspace membership authorization with object ownership validation. While the route layer verifies that a user is a member of the 'workspace_id' provided in the REST URL, the underlying service layer resolves target objects (such as agents, projects, issues, and comments) using only their global UUID. Because the service layer does not verify that the resolved object actually belongs to the workspace specified in the URL, an authenticated attacker can perform CRUD operations on any object across the platform if they know its UUID. This was patched in version 0.1.4 by enforcing workspace-scoped lookups in the service layer.

## Affected products

- MervinPraison PraisonAI Platform < 0.1.4

## Identifiers

- CVE-2026-47399
- GHSA-6h6v-6m7w-7vxx
- PYSEC-2026-2930

## Timeline

- 2026-05-19: patched: Fix committed in version 0.1.4
- 2026-07-21: disclosed: CVE-2026-47399 published

## References

- [https://github.com/MervinPraison/PraisonAI/commit/24385d64876577620f749957bd4814f162f4ca47](https://github.com/MervinPraison/PraisonAI/commit/24385d64876577620f749957bd4814f162f4ca47)
- [https://github.com/MervinPraison/PraisonAI/pull/1686](https://github.com/MervinPraison/PraisonAI/pull/1686)
- [https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6h6v-6m7w-7vxx](https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6h6v-6m7w-7vxx)

## Related threats

- [PraisonAI missing authorization check on DELETE endpoints](https://junglewise.ai/threats/cve-2026-57121-praisonai-missing-ownership-check-on-delete-endpoints-allows)
- [PraisonAI Platform authorization bypass in issue dependency deletion](https://junglewise.ai/threats/cve-2026-62179-praisonai-platform-members-can-delete-owner-issue-dependencies)
- [PraisonAI JWT authentication bypass with hardcoded dev secret](https://junglewise.ai/threats/cve-2026-57148-praisonai-jwt-authentication-bypass-with-hardcoded-dev-secret)
- [PraisonAI JWT authentication bypass with hardcoded secret](https://junglewise.ai/threats/cve-2026-57147-praisonai-jwt-authentication-bypass-with-hardcoded-secret)
- [PraisonAI Platform IDOR and privilege escalation in Platform API](https://junglewise.ai/threats/cve-2026-48169-praisonai-platform-idor-and-privilege-escalation-in-platform-api)