CVE-2026-48169: PraisonAI Platform IDOR and privilege escalation in Platform API

Executive brief

PraisonAI Platform, a tool for managing AI projects and workspaces, contains security flaws that allow any registered user to access or modify data belonging to other organizations. Additionally, a low-privileged member of a workspace can exploit these flaws to promote themselves to an administrator and lock out the original owners. This could lead to a total loss of data privacy and unauthorized control over corporate AI projects.

Technical details

The PraisonAI Platform API suffers from two primary authorization failures. First, the service layer for 'issues' and 'projects' (e.g., issue_service.py) performs global database lookups using primary keys without verifying workspace ownership, enabling cross-workspace IDOR. An attacker can read, update, or delete resources in any workspace by manipulating UUIDs in API requests. Second, member management endpoints in workspaces.py only require a 'member' role for access and lack server-side checks for role hierarchy or self-promotion. This allows any workspace member to escalate their privileges to 'owner' and remove other members, including the original creator. These issues are addressed in version 0.1.4.

Affected products

• MervinPraison praisonai-platform <= 0.1.2

Timeline

• 2026-05-19: advisory: Initial disclosure on GitHub
• 2026-05-29: patched: Updated advisory and patch availability confirmed

References

• https://api.github.com/users/joshuaalwin
• https://github.com/joshuaalwin
• https://api.github.com/users/joshuaalwin/gists%7B/gist_id%7D
• https://api.github.com/users/joshuaalwin/repos
• https://avatars.githubusercontent.com/u/80916901?v=4
• https://api.github.com/users/joshuaalwin/events%7B/privacy%7D