Executive brief
PraisonAI Platform, a system for managing multi-agent AI teams, contains a flaw that allows any basic user to grant themselves administrative control. By sending a specially crafted request to the workspace management interface, a user with the lowest level of access can promote themselves to 'owner' status. This allows an attacker to take full control of a workspace, access sensitive data, modify settings, or lock out legitimate administrators.
Technical details
A vertical privilege escalation vulnerability exists in the `PATCH /workspaces/{workspace_id}/members/{user_id}` endpoint of the PraisonAI Platform. The endpoint is protected by a dependency, `require_workspace_member`, which defaults to a minimum role of 'member' and is not overridden by the route handler. Furthermore, the underlying `MemberService.update_role` method lacks authorization logic to verify if the requester has the authority to change roles or if they are attempting to promote themselves. An authenticated attacker with 'member' privileges can exploit this by sending a PATCH request to update their own role to 'owner', gaining full administrative control over the workspace. This issue is resolved in version 0.1.4.
Affected products
- MervinPraison praisonai-platform < 0.1.4
Timeline
- 2026-05-19: patched: Fix committed to repository
- 2026-07-21: disclosed: CVE published to NVD