Which versions of PraisonAI Platform are affected by CVE-2026-61440?

PraisonAI Platform before version 0.1.9 contains broken authorization that allows any authenticated workspace member to modify shared labels and issue associations without proper role controls,…. A patch is available.

How to fix or mitigate CVE-2026-61440?

Within 24 hours, inventory all PraisonAI Platform deployments and current versions. Within 7 days, patch all instances to version 0.1.9 or later, prioritizing production environments. Within 30 days, audit label and issue modification logs from the past 90 days to identify unauthorized changes by non-administrator users, and confirm proper RBAC enforcement post-upgrade.

PraisonAI Platform CVE-2026-61440

Q: What is the CVSS score of CVE-2026-61440?

CVE-2026-61440 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-44644 HIGH

Missing Authorization (CWE-862)

2026-07-15 VulnCheck

GHSA-vp55-5c2v-3597

Authentication Bypass Praisonai Mervinpraison

7.1

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

4.3 MEDIUM

Authenticated workspace member (PR:L) can remotely and easily mutate label data with no confidentiality or availability impact and only partial integrity loss to bounded taxonomy data, so I:L.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Source Code Evidence Fetched

Jul 15, 2026 - 12:23 vuln.today

Analysis Generated

Jul 15, 2026 - 12:23 vuln.today

CVE Published

Jul 15, 2026 - 11:25 cve.org

HIGH 7.1

DescriptionCVE.org

PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues. Attackers with workspace member privileges can exploit PATCH and POST/DELETE endpoints to alter shared label taxonomy and manipulate issue-label associations without owner or admin authorization.

AnalysisAI

Broken authorization in PraisonAI Platform before 0.1.9 lets any authenticated workspace member modify shared label taxonomy and issue-label associations they should not control, renaming and recoloring shared labels and adding or removing labels on issues created by owners or admins. The flaw (CWE-862, missing authorization) stems from label PATCH and issue-label POST/DELETE endpoints trusting workspace membership without enforcing owner/admin role checks. Reported by VulnCheck with a vendor patch available; there is no public exploit identified at time of analysis and it is not in CISA KEV.

Technical ContextAI

PraisonAI is an open-source multi-agent AI framework (CPE cpe:2.3:a:mervinpraison:praisonai) whose Platform component adds collaborative workspace features including issue tracking with shared labels - conceptually similar to GitHub/Linear-style label taxonomies. The vulnerability is a CWE-862 Missing Authorization defect: the REST endpoints that mutate labels (PATCH for rename/recolor) and issue-label links (POST to attach, DELETE to detach) authenticate the caller as a workspace member but never verify that the member holds the owner or admin role required to alter shared, owner-scoped resources. This is a classic function-level authorization gap where the object action, not just the object, needs an entitlement check.

RemediationAI

Vendor-released patch: upgrade PraisonAI Platform to 0.1.9 or later, which is referenced by commit 846568c7a5d8ce9e71e56e4c213f027c04909753 and advisory GHSA-xxgv-vgvj-qvxh. If an immediate upgrade is not possible, apply compensating controls at the application or gateway layer: restrict who can join workspaces as members (treat member as a trusted role until patched), and place a proxy/authorization rule in front of the label mutation endpoints to block PATCH on labels and POST/DELETE on issue-label associations for non-owner/non-admin identities - accepting the trade-off that legitimate members temporarily lose the ability to edit labels or tag issues. Also review audit logs for unexpected label renames/recolors or issue-label changes made by non-privileged members to detect prior abuse. Reference the vendor advisory (https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-xxgv-vgvj-qvxh) for authoritative fix guidance.