PatchSiren cyber security CVE debrief
CVE-2026-47413 MervinPraison CVE debrief
CVE-2026-47413 is a critical vulnerability in PraisonAI Platform versions prior to 0.1.4, allowing for privilege escalation and cross-tenant member injection. The vulnerability exists in the `POST /workspaces/{workspace_id}/members` endpoint, which is gated only by `require_workspace_member(workspace_id)` and forwards the request body's `user_id` and `role` straight into `MemberService.add(workspace_id, user_id, role)`, without any caller-permission check. This allows a user with the lowest workspace privilege to add any user, including a new attacker-controlled account or an existing account they want to grief, as the owner of the workspace. The CVE record was published on 2026-07-21T18:17:00.133Z and has not been modified since then. The NVD entry is currently Deferred.
- Vendor
- MervinPraison
- Product
- praisonai-platform
- CVSS
- CRITICAL 9.6
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-07-21
- Original CVE updated
- 2026-07-22
- Advisory published
- 2026-07-21
- Advisory updated
- 2026-07-22
Who should care
Users of PraisonAI Platform versions prior to 0.1.4 should be aware of this critical vulnerability and take immediate action to patch their systems. This vulnerability has a CVSS score of 9.6 and is considered critical. Operators, platform administrators, vulnerability management teams, and security teams should review the affected scope and severity with the vendor and plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
Technical summary
The vulnerability exists in the `POST /workspaces/{workspace_id}/members` endpoint of PraisonAI Platform. The endpoint is gated only by `require_workspace_member(workspace_id)` (default `min_role='member'`) and forwards the request body's `user_id` and `role` straight into `MemberService.add(workspace_id, user_id, role)`, which has no caller-permission check. This allows for privilege escalation and cross-tenant member injection. The vulnerability has a CVSS score of 9.6 and is considered critical.
Defensive priority
High
Recommended defensive actions
- Patch PraisonAI Platform to version 0.1.4 or later
- Restrict access to the `POST /workspaces/{workspace_id}/members` endpoint
- Monitor for suspicious activity on the PraisonAI Platform
- Implement additional security measures to prevent privilege escalation and cross-tenant member injection
- Review compensating controls for exposed systems while remediation is scheduled and verified
- Check relevant monitoring, detection, and logs for exposed assets that need extra review
- Track exceptions, retest remediated assets, and close the item only after evidence is documented
Evidence notes
The CVE record was published on 2026-07-21T18:17:00.133Z and was last modified on 2026-07-22T15:17:17.920Z. The NVD entry is currently Deferred. There is limited information available about the vulnerability, and defenders should verify the affected scope and severity with the vendor. The CVE record provides a link to the official CVE record and the NVD entry for further information.
Official resources
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T18:17:00.133Z and has not been modified since then. The NVD entry is currently Deferred.