PatchSiren cyber security CVE debrief
CVE-2026-47412 MervinPraison CVE debrief
CVE-2026-47412 is an authorization bypass vulnerability in PraisonAI Platform versions prior to 0.1.4. The DELETE /workspaces/{workspace_id} endpoint is gated only by require_workspace_member(workspace_id) (default min_role='member'). Any member of the workspace can issue a single DELETE to wipe the entire workspace, including every project, issue, comment, agent, label, and member record (cascading via foreign-key relationships). There is no owner-role gate, no confirmation token, no soft-delete window, no recovery path. PraisonAI Platform version 0.1.4 patches the issue. The vulnerability has a high defensive priority, and defenders should apply the patch as soon as possible.
- Vendor
- MervinPraison
- Product
- praisonai-platform
- CVSS
- HIGH 8.1
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-07-21
- Original CVE updated
- 2026-07-22
- Advisory published
- 2026-07-21
- Advisory updated
- 2026-07-22
Who should care
Users of PraisonAI Platform versions prior to 0.1.4 should apply the patch to prevent unauthorized workspace deletion. This includes operators, administrators, and security teams responsible for managing and securing the platform. Additionally, vulnerability management teams should review the CVE record and assess the potential impact on their systems.
Technical summary
The vulnerability exists in the DELETE /workspaces/{workspace_id} endpoint, which is only gated by the require_workspace_member(workspace_id) function with a default minimum role of 'member'. This allows any member of the workspace to delete the entire workspace, including all projects, issues, comments, agents, labels, and member records, due to cascading foreign-key relationships. The vulnerability is patched in PraisonAI Platform version 0.1.4. The affected product deployments should be reviewed, and an owner should be assigned for follow-up.
Defensive priority
High
Recommended defensive actions
- Apply the patch to upgrade PraisonAI Platform to version 0.1.4 or later
- Restrict access to the DELETE /workspaces/{workspace_id} endpoint
- Implement additional authorization checks for workspace deletion
- Monitor for suspicious workspace deletion activity
- Review compensating controls for exposed systems while remediation is scheduled and verified
- Check relevant monitoring, detection, and logs for exposed assets that need extra review
- Track exceptions, retest remediated assets, and close the item only after evidence is documented
Evidence notes
The CVE record was published on 2026-07-21T18:16:59.980Z and was last modified on 2026-07-22T19:17:05.297Z. The NVD entry is currently Deferred. There is limited information available about the vulnerability, and defenders should verify the affected scope and severity with the vendor. The CVE record was sourced from nvd_modified, which may have additional details. However, without further information, defenders should exercise caution when assessing the vulnerability.
Official resources
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T18:16:59.980Z and has not been modified since then. The NVD entry is currently Deferred.