目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

CVE-2026-47419— praisonai-platform 跨工作区读写删 IDOR漏洞

CVSS 8.3 · High EPSS 0.30% · P22

Possible ATT&CK Techniques 1AI

T1528 · Steal Application Access Token

Affected Version Matrix 1

ベンダープロダクトVersion Rangeステータス
MervinPraisonpraisonai-platform< 0.1.4affected
新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2026-47419の基本情報

脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル
praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDOR
ソース: NVD (National Vulnerability Database)
脆弱性説明
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an* Insecure Direct Object Reference. The agent CRUD endpoints (`GET / PATCH / DELETE /workspaces/{workspace_id}/agents/{agent_id}`) gate access on `require_workspace_member(workspace_id)` only, then resolve `agent_id` through `AgentService.get(agent_id)` which is a primary-key lookup with no workspace constraint. A user who is a member of any workspace `W1` can read, modify, or delete agents that belong to a different workspace `W2` by guessing or harvesting an agent UUID and calling `…/workspaces/W1/agents/<W2-agent-id>`. PraisonAI Platform version 0.1.4 patches the issue.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
通过用户控制密钥绕过授权机制
ソース: NVD (National Vulnerability Database)

影響を受ける製品

ベンダープロダクト影響を受けるバージョンCPE購読
MervinPraisonpraisonai-platform < 0.1.4 -

II. CVE-2026-47419の公開POC

#POC説明ソースリンクShenlongリンク
AI生成POC検証済み環境 プレミアム
Qwen3.6-35B-A3B · 7144 文字数
Pro+限定の内容：
脆弱性再現の録画（実際のサンドボックス構築 + トリガー、限定）
脆弱性の原理を深く分析
トリガー条件と影響範囲
完全な実行可能POCコード
攻撃チェーンと緩和策の提案
POCパッケージのダウンロード
月間100件以上のAI生成枠

III. CVE-2026-47419のインテリジェンス情報

请登录查看更多情报信息。

CVE-2026-47419 补丁与修复 (1)

CVE-2026-47419 厂商安全公告 (1)

Same Patch Batch · MervinPraison · 2026-07-21 · 25 CVEs total

CVE-2026-473929.9 CRITICALPraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execu
CVE-2026-473939.8 CRITICALPraisonAI `deploy --type api` emits a Flask server with authentication disabled by default
CVE-2026-473969.8 CRITICALPraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when
CVE-2026-473919.8 CRITICALPraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool e
CVE-2026-474109.8 CRITICALpraisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing
CVE-2026-474139.6 CRITICALpraisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspa
CVE-2026-474169.6 CRITICALpraisonai-platform: Any workspace member can promote themselves (or any other member) to o
CVE-2026-474058.8 HIGHPraisonAI Platform missing role checks let any workspace member become owner and take over
CVE-2026-473998.8 HIGHPraisonAI Platform workspace-scoped routes allow cross-workspace object access by global o
CVE-2026-474158.3 HIGHpraisonai-platform: Issue endpoints accept any issue_id without workspace ownership check,
CVE-2026-474068.1 HIGHpraisonai-platform: Dependency endpoints accept any issue_id and dep_id without workspace
CVE-2026-474178.1 HIGHpraisonai-platform: Comment endpoints accept any issue_id without workspace ownership chec
CVE-2026-474128.1 HIGHpraisonai-platform: Any workspace member can delete the entire workspace via DELETE /works
CVE-2026-474188.1 HIGHpraisonai-platform: Project endpoints accept any project_id without workspace ownership ch
CVE-2026-474098.1 HIGHpraisonai-platform: Any workspace member can remove any other member (including the owner)
CVE-2026-473988.1 HIGHPraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_gen
CVE-2026-474147.6 HIGHpraisonai-platform: Label endpoints accept any label_id and any issue_id without workspace
CVE-2026-474086.5 MEDIUMpraisonai-platform: list_issue_activity returns activity log for any issue regardless of w
CVE-2026-474116.5 MEDIUMpraisonai-platform: Any workspace member can rewrite workspace name, description, and sett
CVE-2026-473905.5 MEDIUMPraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings

Showing 20 of 25 CVEs. View all on vendor page →

IV. 関連脆弱性

同じ製品: praisonai-platform
同じベンダー: MervinPraison
同じ弱点: CWE-639

V. CVE-2026-47419へのコメント

まだコメントはありません

コメントを残す