# praisonai-platform (PyPI) vulnerabilities 25 known vulnerabilities (6 critical, 15 high, 4 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 0.1.9 (Jun 25, 2026): no advisory affects it - Newest unaffected release: 0.1.9 (Jun 25, 2026), the latest release - Weekly downloads: 313 - Dependents: 0 - Releases: 8 since 0.1.0 (Apr 14, 2026) - Registry: https://pypi.org/project/praisonai-platform/ - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-57121: 0.1.4 (0.1.6 is outside it) - CVE-2026-62179: 0.1.0 to 0.1.8 (0.1.9 is outside it) - CVE-2026-57147: 0.1.0 to 0.1.4 (0.1.6 is outside it) - CVE-2026-57148: 0.1.0 to 0.1.4 (0.1.6 is outside it) - CVE-2026-48169: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-47419: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-47418: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-47417: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-47416: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-47415: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-47414: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-47413: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-47412: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-47411: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-47410: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-47409: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-47408: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-47407: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-47406: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-47405: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-47399: 0.1.0 to 0.1.3 (0.1.4 is outside it) - CVE-2026-61440: 0.1.0 to 0.1.8 (0.1.9 is outside it) - CVE-2026-61442: 0.1.0 to 0.1.8 (0.1.9 is outside it) - CVE-2026-61441: 0.1.0 to 0.1.8 (0.1.9 is outside it) - CVE-2026-58653: 0.1.0 to 0.1.6 (0.1.8 is outside it) ## Advisories (25) ### [CVE-2026-57121](https://cve.now/CVE-2026-57121): PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API - Severity: High 8.1 - Published: Oct 23, 2026 - Affected: from 0.1.4, fixed in 0.1.6. - Fixed in 0.1.6 (released Jun 17, 2026, 128 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-62179](https://cve.now/CVE-2026-62179): PraisonAI: Platform members can delete owner issue dependencies through member-owned related issues - Severity: Medium 6.5 - Published: Oct 7, 2026 - Affected: fixed in 0.1.9. - Fixed in 0.1.9 (released Jun 25, 2026, 104 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-57147](https://cve.now/CVE-2026-57147): praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery - Severity: Critical 9.8 - Published: Sep 15, 2026 - Affected: fixed in 0.1.6. - Fixed in 0.1.6 (released Jun 17, 2026, 90 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-57148](https://cve.now/CVE-2026-57148): praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard) - Severity: Critical 9.8 - Published: Sep 15, 2026 - Affected: fixed in 0.1.6. - Fixed in 0.1.6 (released Jun 17, 2026, 90 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-48169](https://cve.now/CVE-2026-48169): PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API - Severity: High 8.8 - Published: Aug 7, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 80 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-47419](https://cve.now/CVE-2026-47419): praisonai-platform: Agent endpoints accept any agent\_id without workspace ownership check, cross-workspace read/update/delete IDOR - Severity: High 8.3 - Published: Jul 21, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 63 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-47418](https://cve.now/CVE-2026-47418): praisonai-platform: Project endpoints accept any project\_id without workspace ownership check, cross-workspace read/update/delete IDOR - Severity: High 8.1 - Published: Jul 21, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 63 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-47417](https://cve.now/CVE-2026-47417): praisonai-platform: Comment endpoints accept any issue\_id without workspace ownership check, cross-workspace comment read and post IDOR - Severity: High 8.1 - Published: Jul 21, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 63 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-47416](https://cve.now/CVE-2026-47416): praisonai-platform: Any workspace member can promote themselves (or any other member) to owner via PATCH /workspaces/{id}/members/{user\_id} - Severity: Critical 9.6 - Published: Jul 21, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 63 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-47415](https://cve.now/CVE-2026-47415): praisonai-platform: Issue endpoints accept any issue\_id without workspace ownership check, cross-workspace read/update/delete IDOR - Severity: High 8.3 - Published: Jul 21, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 63 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-47414](https://cve.now/CVE-2026-47414): praisonai-platform: Label endpoints accept any label\_id and any issue\_id without workspace ownership check, cross-workspace label… - Severity: High 7.6 - Published: Jul 21, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 63 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-47413](https://cve.now/CVE-2026-47413): praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members - Severity: Critical 9.6 - Published: Jul 21, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 63 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-47412](https://cve.now/CVE-2026-47412): praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id} - Severity: High 8.1 - Published: Jul 21, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 63 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-47411](https://cve.now/CVE-2026-47411): praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id} - Severity: Medium 6.5 - Published: Jul 21, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 63 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-47410](https://cve.now/CVE-2026-47410): praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM\_ENV is… - Severity: Critical 9.8 - Published: Jul 21, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 63 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-47409](https://cve.now/CVE-2026-47409): praisonai-platform: Any workspace member can remove any other member (including the owner) via DELETE /workspaces/{id}/members/{user\_id} - Severity: High 8.1 - Published: Jul 21, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 63 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-47408](https://cve.now/CVE-2026-47408): praisonai-platform: list\_issue\_activity returns activity log for any issue regardless of workspace ownership - Severity: Medium 6.5 - Published: Jul 21, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 63 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-47407](https://cve.now/CVE-2026-47407): PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation - Severity: Critical 9.4 - Published: Jul 21, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 63 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-47406](https://cve.now/CVE-2026-47406): praisonai-platform: Dependency endpoints accept any issue\_id and dep\_id without workspace ownership check, cross-workspace issue linking +… - Severity: High 8.1 - Published: Jul 21, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 63 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-47405](https://cve.now/CVE-2026-47405): PraisonAI Platform missing role checks let any workspace member become owner and take over workspace membership - Severity: High 8.8 - Published: Jul 21, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 63 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-47399](https://cve.now/CVE-2026-47399): PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID - Severity: High 8.8 - Published: Jul 21, 2026 - Affected: fixed in 0.1.4. - Fixed in 0.1.4 (released May 19, 2026, 63 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-61440](https://cve.now/CVE-2026-61440): PraisonAI Platform before 0.1.9 Authorization Bypass via Label Endpoints - Severity: High 7.1 - Published: Jul 15, 2026 - Affected: fixed in 0.1.9. - Fixed in 0.1.9 (released Jun 25, 2026, 20 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-61442](https://cve.now/CVE-2026-61442): PraisonAI Platform before 0.1.9 Authorization Bypass via PATCH - Severity: High 7.1 - Published: Jul 11, 2026 - Affected: fixed in 0.1.9. - Fixed in 0.1.9 (released Jun 25, 2026, 16 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-61441](https://cve.now/CVE-2026-61441): PraisonAI Platform before 0.1.9 Authorization Bypass via Dependencies - Severity: High 7.1 - Published: Jul 10, 2026 - Affected: fixed in 0.1.9. - Fixed in 0.1.9 (released Jun 25, 2026, 15 days before disclosure). - The latest release, 0.1.9, is not affected. ### [CVE-2026-58653](https://cve.now/CVE-2026-58653): PraisonAI - Authorization Bypass via Unvalidated project\_id in Issue Create/Update - Severity: Medium 5.3 - Published: Jul 2, 2026 - Affected: fixed in 0.1.8. - Fixed in 0.1.8 (released Jun 17, 2026, 15 days before disclosure). - The latest release, 0.1.9, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/praisonai-platform Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.