CVE-2026-57121: PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API
PraisonAI is a multi-agent teams system. From version 0.1.4 to before version 0.1.5 in praisonai-platform, a workspace member can permanently delete any resource — projects, agents, issues, labels, issue dependencies, and issue-label attachments — created by the workspace owner or other members. All six content DELETE endpoints enforce workspace membership but perform no ownership or role check. A single malicious or compromised member account can wipe an entire workspace's content irreversibly. This issue has been patched in version 0.1.5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
praisonai-platformto a version that resolves this vulnerability.Fixed in 0.1.5
Event History
Frequently Asked Questions
Which deployments are affected?
PraisonAI praisonai-platform versions 0.1.4 through versions before 0.1.5 are affected. Version 0.1.5 contains the patch.
What access does an attacker need?
The attacker needs an authenticated workspace member account. No elevated workspace role, ownership of the targeted content, user interaction, or special configuration is required.
What can an affected member delete?
An affected member can permanently delete projects, agents, issues, labels, issue dependencies, and issue-label attachments created by other members or the workspace owner. The deletion can affect the entire workspace and is irreversible.
Is a default deployment affected?
The vulnerable DELETE endpoints check only workspace membership and do not require ownership or an authorized role. Therefore, affected versions are exposed wherever untrusted or compromised users can become workspace members.