PT-2026-45066 · Unknown · Praisonai-Platform
CVE-2026-47416
·
Published
2026-05-29
·
Updated
2026-07-21
CVSS v3.1
9.6
Critical
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
praisonai-platform (affected versions not specified)
Description
A vertical privilege escalation exists where a user with the lowest privilege level can promote themselves to a workspace owner. The issue occurs because the
PATCH /workspaces/{workspace id}/members/{user id} endpoint uses a dependency that defaults to a minimum role of member, failing to enforce owner or admin privileges. Consequently, the update member role() function calls MemberService.update role(), which updates the role variable without verifying if the caller has the authority to assign the new role or if the new role is higher than the caller's own. An attacker can exploit this by sending a request to the affected endpoint with role set to owner, granting them full administrative control over the workspace, including the ability to manage members and modify workspace settings.Recommendations
Update the
PATCH /workspaces/{workspace id}/members/{user id} endpoint to require the owner role for access.
Modify the update role() function in the service layer to verify that the caller has owner privileges before updating a member's role.
Restrict the update role() function from assigning a role higher than the caller's own privilege level.Exploit
Fix
Missing Authorization
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Praisonai-Platform