PraisonAI Platform improper authorization in DELETE endpoints

Executive brief

A security flaw in the PraisonAI platform allows any member of a workspace to permanently delete projects, agents, and tasks created by other users, including the workspace owner. This could lead to irreversible data loss and operational disruption if a member account is compromised or used maliciously. The platform's intended permission settings, which should prevent members from modifying others' work, are not correctly enforced for deletion actions.

Technical details

An improper authorization vulnerability (CWE-285) exists in the PraisonAI Platform API due to missing ownership checks on DELETE handlers. While the API verifies that a requester is a member of the workspace, it fails to verify if the user is the resource creator or holds an administrative role. Affected endpoints include those for projects, agents, issues, labels, and dependencies. An authenticated attacker with a 'member' role can exploit this via network requests to permanently remove resources created by owners or admins. The issue is addressed in version 0.1.6.

Affected products

• PraisonAI praisonai-platform 0.1.4

Timeline

• 2026-06-17: disclosed
• 2026-06-18: advisory: GHSA-rh39-9c67-59mh published
• 2026-06-18: patched: Version 0.1.6 released

References

• https://api.github.com/users/adamyordan
• https://github.com/adamyordan
• https://api.github.com/users/adamyordan/gists%7B/gist_id%7D
• https://api.github.com/users/adamyordan/repos
• https://avatars.githubusercontent.com/u/9531164?v=4
• https://api.github.com/users/adamyordan/events%7B/privacy%7D