# CVE-2026-47412: MervinPraison PraisonAI Platform authorization bypass in workspace deletion

Source: https://junglewise.ai/threats/cve-2026-47412-mervinpraison-praisonai-platform-authorization-bypass-in  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-21. Updated: 2026-07-21  
License: CC BY 4.0 with a link back

CVE-2026-47412 · Severity: high · CVSS 8.1 · Published 2026-07-21

PraisonAI Platform, a system for managing multi-agent AI teams, contains a flaw that allows any member of a workspace to permanently delete it. An attacker with basic member-level access can trigger a total deletion of all projects, agents, comments, and member records within that workspace. This action is irreversible, as the system lacks a recovery window or confirmation process, leading to a complete loss of data and service for the affected organization.

Technologies: [praisonai-platform (PyPI)](https://junglewise.ai/threats/technologies/praisonai-platform). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-47412 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-47412 being exploited in the wild.

**How severe is CVE-2026-47412?** High severity, with a CVSS score of 8.1, published 21 July 2026.

**Which products and versions are affected?** praisonai-platform (PyPI) < 0.1.4, ECOSYSTEM:introduced=0,fixed=0.1.4.

**Is there a fix for CVE-2026-47412?** Yes. praisonai-platform (PyPI): upgrade to 0.1.4 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-47412 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-47412?** Check whether you run praisonai-platform (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- praisonai-platform (PyPI): upgrade to 0.1.4 or later

  ```sh
  pip install "praisonai-platform>=0.1.4"
  ```


## Technical details

An authorization bypass exists in the `DELETE /workspaces/{workspace_id}` endpoint of the PraisonAI Platform. The endpoint is protected by the `require_workspace_member` dependency, which defaults to a `min_role` of "member" rather than "owner." Consequently, any authenticated user with basic member privileges can issue a DELETE request that triggers a cascading database deletion of the workspace and all child entities (projects, agents, issues, etc.) via foreign-key relationships. The vulnerability is exacerbated by the lack of a soft-delete mechanism or confirmation tokens. The issue is addressed in version 0.1.4 by enforcing a "owner" role requirement for this destructive operation.

## Affected products

- MervinPraison praisonai-platform <= 0.1.2

## Identifiers

- CVE-2026-47412
- GHSA-g8rr-7rj2-f627
- PYSEC-2026-2934

## Timeline

- 2026-05-19: patched: Fix merged in PR #1686
- 2026-05-19: advisory: GitHub Advisory GHSA-g8rr-7rj2-f627 published
- 2026-07-21: disclosed: CVE-2026-47412 published to NVD

## References

- [https://github.com/MervinPraison/PraisonAI/commit/24385d64876577620f749957bd4814f162f4ca47](https://github.com/MervinPraison/PraisonAI/commit/24385d64876577620f749957bd4814f162f4ca47)
- [https://github.com/MervinPraison/PraisonAI/pull/1686](https://github.com/MervinPraison/PraisonAI/pull/1686)
- [https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-g8rr-7rj2-f627](https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-g8rr-7rj2-f627)

## Related threats

- [PraisonAI missing authorization check on DELETE endpoints](https://junglewise.ai/threats/cve-2026-57121-praisonai-missing-ownership-check-on-delete-endpoints-allows)
- [PraisonAI Platform authorization bypass in issue dependency deletion](https://junglewise.ai/threats/cve-2026-62179-praisonai-platform-members-can-delete-owner-issue-dependencies)
- [PraisonAI JWT authentication bypass with hardcoded dev secret](https://junglewise.ai/threats/cve-2026-57148-praisonai-jwt-authentication-bypass-with-hardcoded-dev-secret)
- [PraisonAI JWT authentication bypass with hardcoded secret](https://junglewise.ai/threats/cve-2026-57147-praisonai-jwt-authentication-bypass-with-hardcoded-secret)
- [PraisonAI Platform IDOR and privilege escalation in Platform API](https://junglewise.ai/threats/cve-2026-48169-praisonai-platform-idor-and-privilege-escalation-in-platform-api)