CVE-2026-57121highBroken access control2026-10-23

CVE-2026-57121: Any praisonai-platform workspace member can delete everyone else's projects and agents

In praisonai-platform 0.1.4, the DELETE endpoints for projects, agents, issues, labels, issue dependencies and issue-label links only check that the caller is a workspace member. A single malicious or compromised member account can permanently wipe content created by the owner and other members. GitHub lists 0.1.6 as the first patched version; NVD's text says 0.1.5.

01.

What it is

PraisonAI's documented role matrix says members can't edit others' content, but all six content DELETE handlers skip the ownership and owner/admin role check.

Requests like DELETE /api/v1/workspaces/{workspace_id}/agents/{agent_id} from a plain member return 204 instead of 403, and the deletions can't be undone.

Create and edit paths are not part of this report; the missing check is limited to content deletes.

02.

How to check

Affected: praisonai-platform (PyPI) 0.1.4.
You are at risk if you run a shared praisonai-platform workspace where people with the member role shouldn't be able to delete others' work.

03.

How to fix

Upgrade praisonai-platform to 0.1.6 or later (the version GitHub's advisory lists as patched).
Until then, only add people you fully trust as workspace members, and back up workspace data.

pip show praisonai-platform | grep -i version

04.

Sources

More advisories for this tool