praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}

Exploitation

No confirmed exploitation recorded. Patch Next marks exploitation only from CISA KEV.

CVSS

6.5 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

• CVE-2026-47411: 0.34% estimated exploitation activity in the next 30 days; percentile 26.92 (FIRST EPSS, 2026-11-03). This is a model estimate, not proof of exploitation or customer exposure.

As published by the source; long descriptions are shortened.

Summary Type: Authorization bypass enabling workspace metadata + settings tampering. The PATCH /workspaces/{workspaceid} endpoint is gated only by requireworkspacemember(workspaceid) (default minrole="member"). Any member can rewrite the workspace's name, description, and the settings JSON blob. The settings field is a free-form JSON object — depending on which downstream code reads it, this becomes a configuration-injection primitive for any setting the platform exposes there. File: src/praisonai-platform/praisonaiplatform/api/routes/workspaces.py, lines 63-74; services/workspaceservice.py's update() method. Root cause: Depends(requireworkspacemember) resolves to default minrole="member". WorkspaceService.update(workspaceid, name, description, settings) writes the new fields to the workspace row without any caller-permission check. The role hierarchy (MemberService.hasrole) is never consulted. Affected Code File: src/praisonai-platform/praisonaiplatform/api/routes/workspaces.py,…

Published by the source

1 Jun 2026, 14:23 UTC

Last modified by the source

13 Jul 2026, 16:43 UTC

Source last checked

26 Oct 2026, 13:41 UTC

1. Revision 2 · amended · 26 Oct 2026

   Amended from ghsa record GHSA-rcmc-q9rj-4wmq

2. Revision 1 · created · 24 Oct 2026

   Published from osv record GHSA-rcmc-q9rj-4wmq

Preview the exact text before you copy it. Commands are read-only suggestions; review them before running anything.

# Patch Next advisory brief: CVE-2026-47411

Advisory: praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}
IDs: CVE-2026-47411, GHSA-rcmc-q9rj-4wmq
Record: https://patchnext.com/advisories/cve-2026-47411 (revision 2, source checked 26 Oct 2026, 13:41 UTC)
Inventory: none attached. This brief comes from a public page and does not say whether any deployment is affected.
Severity: Medium (CVSS 6.5)
Exploitation: no confirmed exploitation recorded. Patch Next confirms exploitation only from CISA KEV.
Vendor response: Vendor fix available; fixed versions by package: praisonai-platform 0.1.4. A vendor fix does not mean a deployment is fixed.

## Affected components
- PyPI praisonai-platform: affected < 0.1.4; fixed in 0.1.4

## Suggested inspection (read-only)
- `python -m pip show praisonai-platform`: prints the installed version. Run with the environment that serves production active.

## Supported action
Upgrade each affected component to a fixed version on its release line. For a transitive dependency, upgrade the parent package or add an override or constraint, then regenerate the lockfile. Redeploy every environment that ran an affected version.

## Required regression checks
- Run the test suite and a production build.
- Exercise the features that depend on praisonai-platform.
- Repeat the inspection and confirm that only fixed versions remain installed.

## Rollback considerations
- Keep the previous lockfile and deployment artifact. Rolling back reinstates the vulnerable version, so apply any documented mitigation while you fix forward.

## Unresolved questions
- Which deployments run an affected version?
- Exploitation status can change. Check again before lowering the priority.
- Mark the work resolved only after the fixed version is verified in production.

## Sources
- Verified: https://osv.dev/vulnerability/GHSA-rcmc-q9rj-4wmq (OSV record GHSA-rcmc-q9rj-4wmq lists affected ranges: PyPI praisonai-platform >=0 <0.1.4 (fixed))
- Verified: https://github.com/advisories/GHSA-rcmc-q9rj-4wmq (GitHub-reviewed advisory GHSA-rcmc-q9rj-4wmq lists affected ranges: PyPI praisonai-platform >=0 <0.1.4)

Commands are suggestions: review each one before running it.