# CVE-2026-47416: MervinPraison PraisonAI Platform privilege escalation in workspace members endpoint

Source: https://junglewise.ai/threats/cve-2026-47416-mervinpraison-praisonai-platform-privilege-escalation-in  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-21. Updated: 2026-07-21  
License: CC BY 4.0 with a link back

CVE-2026-47416 · Severity: critical · CVSS 9.6 · Published 2026-07-21

PraisonAI Platform, a system for managing multi-agent AI teams, contains a flaw that allows any basic user to grant themselves administrative control. By sending a specially crafted request to the workspace management interface, a user with the lowest level of access can promote themselves to 'owner' status. This allows an attacker to take full control of a workspace, access sensitive data, modify settings, or lock out legitimate administrators.

Technologies: [praisonai-platform (PyPI)](https://junglewise.ai/threats/technologies/praisonai-platform). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-47416 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-47416 being exploited in the wild.

**How severe is CVE-2026-47416?** Critical severity, with a CVSS score of 9.6, published 21 July 2026.

**Which products and versions are affected?** praisonai-platform (PyPI) <= 0.1.2, ECOSYSTEM:introduced=0,fixed=0.1.4.

**Is there a fix for CVE-2026-47416?** Yes. praisonai-platform (PyPI): upgrade to 0.1.4 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-47416 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-47416?** Check whether you run praisonai-platform (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- praisonai-platform (PyPI): upgrade to 0.1.4 or later

  ```sh
  pip install "praisonai-platform>=0.1.4"
  ```


## Technical details

A vertical privilege escalation vulnerability exists in the `PATCH /workspaces/{workspace_id}/members/{user_id}` endpoint of the PraisonAI Platform. The endpoint is protected by a dependency, `require_workspace_member`, which defaults to a minimum role of 'member' and is not overridden by the route handler. Furthermore, the underlying `MemberService.update_role` method lacks authorization logic to verify if the requester has the authority to change roles or if they are attempting to promote themselves. An authenticated attacker with 'member' privileges can exploit this by sending a PATCH request to update their own role to 'owner', gaining full administrative control over the workspace. This issue is resolved in version 0.1.4.

## Affected products

- MervinPraison praisonai-platform < 0.1.4

## Identifiers

- CVE-2026-47416
- GHSA-c2m8-4gcg-v22g
- PYSEC-2026-481

## Timeline

- 2026-05-19: patched: Fix committed to repository
- 2026-07-21: disclosed: CVE published to NVD

## References

- [https://github.com/MervinPraison/PraisonAI/commit/ef79b7a0561796ad9807f0f09538c25cc78d3619](https://github.com/MervinPraison/PraisonAI/commit/ef79b7a0561796ad9807f0f09538c25cc78d3619)
- [https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-c2m8-4gcg-v22g](https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-c2m8-4gcg-v22g)

## Related threats

- [PraisonAI missing authorization check on DELETE endpoints](https://junglewise.ai/threats/cve-2026-57121-praisonai-missing-ownership-check-on-delete-endpoints-allows)
- [PraisonAI Platform authorization bypass in issue dependency deletion](https://junglewise.ai/threats/cve-2026-62179-praisonai-platform-members-can-delete-owner-issue-dependencies)
- [PraisonAI JWT authentication bypass with hardcoded dev secret](https://junglewise.ai/threats/cve-2026-57148-praisonai-jwt-authentication-bypass-with-hardcoded-dev-secret)
- [PraisonAI JWT authentication bypass with hardcoded secret](https://junglewise.ai/threats/cve-2026-57147-praisonai-jwt-authentication-bypass-with-hardcoded-secret)
- [PraisonAI Platform IDOR and privilege escalation in Platform API](https://junglewise.ai/threats/cve-2026-48169-praisonai-platform-idor-and-privilege-escalation-in-platform-api)