CVE-2026-61441

Name of the Vulnerable Software and Affected Versions PraisonAI Platform versions prior to 0.1.9

Description Improper authorization occurs during the deletion of issue dependencies. The DELETE dependency route allows a user to specify either endpoint of a dependency edge, but the system only validates delete permissions against the issue URL selected by the caller. Consequently, a workspace member can bypass owner or administrator authorization to remove dependencies created by an owner by targeting a related issue endpoint that the member owns, as the permission check is performed against the member-owned issue.

Recommendations Update PraisonAI Platform to version 0.1.9 or later.