CVE-2026-58653— PraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/Update
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-58653
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/Update
Source: CVE Program / CVE List V5
Vulnerability Description
PraisonAI before 0.1.7 fails to validate that project_id in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace constraints.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Vulnerability Title
PraisonAI 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PraisonAI PraisonAI是PraisonAI公司的一款整合人工智能代理的服务器中间件软件。 PraisonAI 0.1.7之前版本存在授权问题漏洞，该漏洞源于未验证问题创建和更新请求中的project_id属于URL工作区，可能导致攻击者创建引用其他工作区项目的问题，造成跨租户数据污染。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-58653
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-58653
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-58653 (2)
IV. Related Vulnerabilities
Same product: PraisonAI
- CVE-2026-47398
PraisonAI: Arbitrary code execution via unguarded `spec.load - CVE-2026-47397
PraisonAI has an Arbitrary File Write in Python API - CVE-2026-47396
PraisonAI call server exposes unauthenticated agent listing, - CVE-2026-47395
PraisonAI CLI automatically resolves @url mentions in prompt - CVE-2026-47394
PraisonAI vulnerable to unauthenticated arbitrary file read
Same vendor: PraisonAI
- CVE-2026-56078
PraisonAI - Arbitrary File Read and Write via Path Traversal - CVE-2026-56077
PraisonAI - Information Disclosure via Shared MultiAgentLedg - CVE-2026-56076
PraisonAI - Cross-Origin Agent Execution via Hardcoded Wildc - CVE-2026-56074
PraisonAI - Tool Approval Cache Bypass via Coarse-Grained Ca - CVE-2026-56075
PraisonAI - Arbitrary Shell Command Execution via Hardcoded
Same weakness: CWE-639
- CVE-2026-5060
MasterStudy LMS WordPress Plugin – for Online Courses and Ed - CVE-2026-57510
SuperPlane < 0.27.0 Broken Object Level Authorization via Ca - CVE-2026-49258
Nebula Mesh: Web UI lacks ownership checks, enabling cross-o - CVE-2026-18028
Missing authorization check in event quick setup view - CVE-2026-16797
ShopLentor <= 3.4.5 - Insecure Direct Object Reference to Au
V. Comments for CVE-2026-58653
No comments yet