CVE-2026-47419

Name of the Vulnerable Software and Affected Versions praisonai-platform (affected versions not specified)

Description An Insecure Direct Object Reference exists in the agent CRUD endpoints. The system validates if a user is a member of a workspace but fails to verify if the requested agent actually belongs to that workspace. This allows an authenticated user of any workspace to read, modify, or delete agents from other workspaces by providing a valid agent UUID. This could lead to the exposure of proprietary system prompts and API keys, or the redirection of LLM traffic to attacker-controlled endpoints.

API Endpoints: GET /workspaces/{workspace id}/agents/{agent id}, PATCH /workspaces/{workspace id}/agents/{agent id}, and DELETE /workspaces/{workspace id}/agents/{agent id}

Vulnerable Parameters or Variables: workspace id and agent id

Function Names: AgentService.get(), AgentService.update(), and AgentService.delete()

Recommendations Modify the AgentService.get(), AgentService.update(), and AgentService.delete() functions to require and validate the workspace id predicate during the database lookup to ensure the agent belongs to the specified workspace. Update the route handlers in routes/agents.py to pass the workspace id parameter into the corresponding AgentService method calls.