PraisonAI Platform Authorization Bypass to Delete Issue Dependencies

Vulnerability Overview Title: Platform members can delete owner issue dependencies through member-owned related issues Description: Platform members can delete owner issue dependencies via member-owned related issues. Specifically, workspace members cannot delete dependencies through the issue endpoint created by the owner, but they can delete the same dependency through the endpoint for the member-owned related issue. This occurs because the route accepts either endpoint and only checks deletion permissions against the issue URL selected by the caller. Scope of Impact Affected Versions: = 0.1.9 CVSS Score: 6.5/10 Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: None Remediation 1. Explicit Dependency Authorization: Define authorization for dependencies rather than deriving it from the issue URL selected by the caller. A simple fix is to require delete permissions for the primary issue ( ) regardless of which related issue endpoint is used to access the relationship. 2. Strict Permission Checks: A stricter fix is to require workspace administrator privileges or sufficient permissions on the related issues prior to deleting dependencies. 3. Permission Checks at Dependency Creation: For creation, require that the caller is the owner/administrator of the existing issue or holds permissions on the primary issue before creating a dependency. This prevents regular workspace members from adding dependencies to issues created by owners unless such collaborative rules are explicitly expected. 4. Regression Testing: Add regression tests to cover these scenarios: members cannot delete owner-to-member dependencies via the owner issue endpoint; members cannot delete owner-to-member dependencies via the member issue endpoint; owners/administrators can delete them; non-members cannot create dependencies; and members cannot create dependencies for owner-created issues unless explicitly expected under collaborative rules. POC Code

Goal Reached Thanks to every supporter — we hit 100%!

PraisonAI Platform Authorization Bypass to Delete Issue Dependencies

More from this source