Skip to content
Threat Feed

Tag

Workspace-Bypass

1 brief RSS
critical threat

PraisonAI Platform Workspace Cross-Access Vulnerability

PraisonAI Platform's workspace-scoped REST routes have an object-level authorization flaw allowing authenticated users from one workspace to access, modify, and delete objects in another workspace by providing the victim object's global UUID.

PraisonAI Platform authorization privilege-escalation workspace-bypass
2r 1t