PatchSiren cyber security CVE debrief
CVE-2026-47416 MervinPraison CVE debrief
CVE-2026-47416 is a critical vulnerability in PraisonAI Platform versions prior to 0.1.4. The vulnerability allows for vertical privilege escalation via the PATCH /workspaces/{workspace_id}/members/{user_id} endpoint. This endpoint is gated by require_workspace_member(workspace_id), which defaults to min_role='member' and is never overridden by the route. The handler then calls MemberService.update_role(workspace_id, user_id, body.role), which sets the target member's role to whatever the request body specifies, with no check that the caller has owner-or-admin privilege, no check that the new role is not higher than the caller's own, and no check that the caller is not silently promoting themselves. The vulnerability has been patched in version 0.1.4.
- Vendor
- MervinPraison
- Product
- praisonai-platform
- CVSS
- CRITICAL 9.6
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-07-21
- Original CVE updated
- 2026-07-22
- Advisory published
- 2026-07-21
- Advisory updated
- 2026-07-22
Who should care
Users of PraisonAI Platform versions prior to 0.1.4 should be aware of this vulnerability and take steps to mitigate it. This includes upgrading to version 0.1.4 or later, and ensuring that proper access controls are in place. Operators, platform administrators, and security teams should review the vulnerability and implement necessary mitigations.
Technical summary
The CVE-2026-47416 vulnerability is caused by a lack of proper access control checks in the PATCH /workspaces/{workspace_id}/members/{user_id} endpoint. This endpoint allows an attacker to escalate their privileges by setting the target member's role to a higher level than their own, without proper authorization checks. The vulnerability affects PraisonAI Platform versions prior to 0.1.4 and can be exploited by authenticated users with minimal privileges.
Defensive priority
High
Recommended defensive actions
- Upgrade to PraisonAI Platform version 0.1.4 or later
- Ensure proper access controls are in place for the PATCH /workspaces/{workspace_id}/members/{user_id} endpoint
- Monitor for suspicious activity on the endpoint
- Review compensating controls for exposed systems while remediation is scheduled and verified
- Check relevant monitoring, detection, and logs for exposed assets that need extra review
- Track exceptions, retest remediated assets, and close the item only after evidence is documented
- Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
Evidence notes
The CVE-2026-47416 vulnerability was discovered and reported by an unknown source. The vulnerability has been patched in PraisonAI Platform version 0.1.4. Evidence is limited, and defenders should verify affected scope and vendor guidance. No additional details are available on exploitability or attack vectors.
Official resources
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T18:17:00.563Z and has not been modified since then.