Vendor
high
advisory
Praison AI Platform Missing Authorization Leads to Workspace Takeover
2 rules 2 TTPsAn authorization bypass vulnerability exists in praisonai-platform where any member can remove any other member, including the workspace owner, due to missing role checks and owner protection logic, allowing an attacker to lock the legitimate owner out of their own workspace, leading to a permanent denial-of-service and potential workspace takeover (CVE-2026-47409).
praisonai-platform
authorization
privilege-escalation
denial-of-service
2r
2t
high
advisory
praisonai-platform: Cross-Workspace Label IDOR Vulnerability
2 rules 3 TTPsPraison AI's praisonai-platform is vulnerable to an insecure direct object reference (IDOR) in the label endpoints (CVE-2026-47414), allowing cross-workspace label modification and information disclosure due to improper validation of label and issue IDs.
praisonai-platform
idor
vulnerability
privilege-escalation
collection
impact
cloud
2r
3t