Executive brief
PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API
Affected products
- PyPI praisonai-platform
Junglewise Threat Intelligence
CVE-2026-57121: PYSEC-2026-3526 - PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API
CVE-2026-57121 · Severity: low · CVSS 3.1 · Published 2026-07-23
Technologies: praisonai-platform (PyPI). Vendors: PyPI.