Executive brief
PraisonAI is an AI-driven platform for managing projects and tasks. A security flaw allows a user in one workspace to link their tasks to projects belonging to a different workspace. This results in "data pollution," where a victim's project statistics and dashboards show incorrect or inflated numbers due to unauthorized data being injected by an outside party.
Technical details
An authorization bypass (CWE-639) exists in the issue create and update endpoints of the PraisonAI platform. The application fails to verify that the 'project_id' provided in the JSON request body belongs to the workspace specified in the URL path. An authenticated attacker can submit a request to their own workspace but include a UUID of a project belonging to a different tenant. Because the 'get_stats' method in 'ProjectService' aggregates issues by 'project_id' without a workspace constraint, the attacker's issues are included in the victim's project statistics. This allows for cross-tenant integrity violations and data pollution. The issue is resolved in version 0.1.7.
Affected products
- MervinPraison PraisonAI (praisonai-platform) < 0.1.7
Timeline
- 2026-06-17: advisory: GitHub Security Advisory published
- 2026-07-02: disclosed: NVD publication date