Cross-workspace IDOR and privilege escalation in PraisonAI Platform (CVE-2026-47407)

PraisonAI Platform's `require_workspace_member` dependency validates only that the caller belongs to the workspace ID in the URL prefix, but route handlers retrieve nested resources (agents, issues, projects, labels, comments, dependencies) by primary key alone without verifying the resource belongs to that workspace. This allows any registered user to read, modify, or delete resources belonging to other tenants. A second flaw in member-management routes applies no minimum-role enforcement, enabling any basic workspace member to escalate their own role to admin or owner, remove other members, and delete the workspace entirely; combined with open registration and a default bind of `0.0.0.0:8000`, no prior access is required to exploit either issue. Affected versions: - <= 0.1.2 We recommend updating to: >= 0.1.4. CVSS 9.4 · our assessment: act_now Reference: https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-h8q5-cp56-rr65 Details: https://vuln.today/cve/CVE-2026-47407