Vulnerability Description
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 are vulnerable to vertical privilege escalation. The `PATCH /workspaces/{workspace_id}/members/{user_id}` endpoint is gated by `require_workspace_member(workspace_id)`, which defaults to `min_role="member"` and is never overridden by the route. The handler then calls `MemberService.update_role(workspace_id, user_id, body.role)` which sets the target member's role to whatever the request body specifies, with no check that the caller has owner-or-admin privilege, no check that the new role is not higher than the caller's own, and no check that the caller is not silently promoting themselves. PraisonAI Platform version 0.1.4 patches the issue.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/MervinPraison/PraisonAI/commit/ef79b7a0561796ad9807f0f09538c2
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-c2m8-4gcg-v2
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-c2m8-4gcg-v2
FAQ
What is CVE-2026-47416?
CVE-2026-47416 is a vulnerability with a CVSS score of 9.6 (CRITICAL). PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 are vulnerable to vertical privilege escalation. The `PATCH /workspaces/{workspace_id}/memb...
How severe is CVE-2026-47416?
CVE-2026-47416 has been rated CRITICAL with a CVSS base score of 9.6/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-47416?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.