Executive brief
PraisonAI Platform is an AI agent orchestration framework. A vulnerability in its issue management system allows a user in one workspace to inject data into another workspace's project statistics. While an attacker cannot see private data, they can manipulate dashboard metrics and project counts, potentially disrupting operations or misleading project managers.
Technical details
The vulnerability is an Insecure Direct Object Reference (IDOR) / Authorization Bypass (CWE-639) located in the issue creation and update logic. The `create_issue` and `update` endpoints in `api/routes/issues.py` accept a `project_id` from the request body but fail to verify that this ID belongs to the `workspace_id` provided in the URL. Because `ProjectService.get_stats()` aggregates issues solely by `project_id` without a workspace constraint, an authenticated attacker can associate their issues with a victim's project. This allows the attacker to pollute the victim's project statistics dashboard. The issue was fixed in version 0.1.8 by implementing workspace validation for all body-supplied object references.
Affected products
- MervinPraison praisonai-platform < 0.1.8
Timeline
- 2026-06-17: disclosed
- 2026-06-18: advisory
- 2026-06-18: patched: Fixed in version 0.1.8