Skip to content
AI Sec Watch
MediumVulnerability

GHSA-rcmc-q9rj-4wmq: praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}

Source
GitHub Advisory(opens in a new tab)
Identifiers
CVE-2026-47411GHSA-rcmc-q9rj-4wmq
Published
Record updated
View JSON
Affected
  • praisonai-platform < 0.1.4
Fixed in
0.1.4
  • released May 19, 2026, 13 days before disclosure
Known exploitation
Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
EPSS
0.3%

Summary

The praisonai-platform PATCH /workspaces/{workspace_id} endpoint in workspaces.py is guarded by require_workspace_member, which defaults to min_role="member". Any workspace member can therefore overwrite the workspace's name, description and free-form settings JSON through WorkspaceService.update(), without an owner-role check. Because the settings object is read by downstream code, an attacker could alter configuration such as provider URLs or invite behaviour, with a CVSS score of 6.5.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items