PT-2026-55200

CVE-2026-58653

Published

2026-06-18

Updated

2026-07-02

Description by

CVSS 4.0

5.3

Medium

MetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 0.1.7

Description An authorization bypass occurs because the software fails to validate that the project id provided in the request bodies for creating and updating issues belongs to the workspace specified in the URL. This allows an attacker to create issues that reference projects from different workspaces, leading to cross-tenant data pollution within project statistics aggregation.

Recommendations Update PraisonAI to version 0.1.7 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Sai-Sh

Vendors

Affected products

Weakness enumeration

CWE-639: Authorization Bypass Through User-Controlled Key

Related identifiers