CVE-2026-47419 MervinPraison CVE debrief

Who should care

Users of PraisonAI Platform versions prior to 0.1.4 should patch to version 0.1.4 or later to address the Insecure Direct Object Reference vulnerability. This includes operators, platform administrators, vulnerability management teams, and security teams who need to ensure the security and integrity of their agent data. The vulnerability allows unauthorized access and modification of agent data, which could have significant operational impacts.

Technical summary

The PraisonAI Platform has an Insecure Direct Object Reference vulnerability in its agent CRUD endpoints. Access is gated on workspace membership, but agent IDs are resolved through a primary-key lookup without a workspace constraint. This allows users who are members of any workspace to read, modify, or delete agents from a different workspace by guessing or harvesting an agent UUID. The vulnerability is patched in version 0.1.4, and users should update to this version or later. The CVSS score of 8.3 indicates a high severity vulnerability.

Defensive priority

High priority due to the high CVSS score of 8.3 and the potential for unauthorized access and modification of agent data.

Recommended defensive actions

• Patch PraisonAI Platform to version 0.1.4 or later
• Restrict access to agent CRUD endpoints to authorized users only
• Implement additional security measures to prevent unauthorized access and modification of agent data
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record was published on 2026-07-21T18:17:00.990Z and last modified on 2026-07-22T15:17:18.030Z. The NVD entry is currently Deferred. The PraisonAI Platform versions prior to 0.1.4 have an Insecure Direct Object Reference vulnerability. Users should verify their deployments and patch to version 0.1.4 or later. The CVE record provides limited source detail, and defenders should review the official advisory for affected scope and severity.

Official resources