{"id":"CVE-2026-57121","kind":"vulnerability","aliases":["CVE-2026-57121"],"related":[],"title":"PraisonAI: any workspace member can permanently delete other members' content","description":"PraisonAI is a multi-agent teams system. From version 0.1.4 to before version 0.1.5 in praisonai-platform, a workspace member can permanently delete any resource — projects, agents, issues, labels, issue dependencies, and issue-label attachments — created by the workspace owner or other members. All six content DELETE endpoints enforce workspace membership but perform no ownership or role check. A single malicious or compromised member account can wipe an entire workspace's content irreversibly. This issue has been patched in version 0.1.5.","summary":"PraisonAI's multi-agent platform lets any workspace member permanently delete projects, agents, issues, labels and issue dependencies created by others. A single malicious or compromised member account can wipe an entire workspace's content with no way to recover it.","severity":"high","cvss":8.1,"epss":0.00378,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","multi-user-workspaces","praisonai-platform","self-hosted"],"not_affected_if":["single-user-workspace","version-0.1.5-or-later"],"how_to_check":"- Check the installed praisonai-platform version; the flaw affects `0.1.4` up to but not including `0.1.5`\n- Review workspace member accounts for anyone unexpected or unused","fix":"- Upgrade praisonai-platform to `0.1.5`\n- Until upgraded, review and remove unneeded workspace member accounts","status":"open","published_at":"2026-10-23T13:17:11+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","triaged_at":"2026-10-25T03:04:33+00:00","updated_at":"2026-10-25T12:38:50+00:00","category":"ai-tooling","confidence":0.8,"triage":{"at":"2026-10-25T03:04:33Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade praisonai-platform to `0.1.5`\n- Until upgraded, review and remove unneeded workspace member accounts","reach":"network","title":"PraisonAI: any workspace member can permanently delete other members' content","impact":"medium","summary":"PraisonAI's multi-agent platform lets any workspace member permanently delete projects, agents, issues, labels and issue dependencies created by others. A single malicious or compromised member account can wipe an entire workspace's content with no way to recover it.","category":"ai-tooling","nicknames":[],"who_cares":["praisonai-platform","self-hosted","multi-user-workspaces"],"confidence":0.8,"needs_auth":"yes","worst_case":"Attacker permanently deletes all workspace projects, agents and issues","analyst_note":"","how_to_check":"- Check the installed praisonai-platform version; the flaw affects `0.1.4` up to but not including `0.1.5`\n- Review workspace member accounts for anyone unexpected or unused","needs_analyst":false,"not_affected_if":["version-0.1.5-or-later","single-user-workspace"],"who_is_affected":"Teams running praisonai-platform between `0.1.4` and `0.1.5` with multiple workspace members. Exposure depends on whether members can authenticate to the workspace; a single-user instance has little to lose from a peer deleting content. Installations already on `0.1.5` or later are not affected.","user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000603,"input_tokens":3370,"output_tokens":532,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-57121':13A,16A '0.1.4':81C '0.1.5':85C,154C 'account':58B,138C 'agent':34B,43B,76C,99C 'ai':18B 'ai-tool':17B 'attach':108C 'check':131C 'compromis':56B,136C 'content':10A,65B,119C,145C 'creat':49B,109C 'cve':11A,14A 'delet':7A,41B,95C,120C 'depend':48B,103C 'endpoint':121C 'enforc':122C 'entir':62B,142C 'host':29B 'irrevers':146C 'issu':44B,47B,100C,102C,106C,148C 'issue-label':105C 'label':45B,101C,107C 'let':36B 'malici':54B,134C 'member':4A,9A,39B,57B,92C,116C,137C 'membership':124C 'multi':21B,33B,75C 'multi-ag':32B,74C 'multi-user-workspac':20B 'other':51B 'owner':113C 'ownership':128C 'patch':151C 'perform':126C 'perman':6A,40B,94C 'platform':26B,35B,89C 'praisonai':1A,25B,30B,71C,88C 'praisonai-platform':24B,87C 'project':42B,98C 'recov':70B 'resourc':97C 'role':130C 'self':28B 'self-host':27B 'singl':53B,133C 'six':118C 'system':78C 'team':77C 'tool':19B 'user':22B 'version':80C,84C,153C 'way':68B 'wipe':60B,140C 'workspac':3A,23B,38B,63B,91C,112C,123C,143C","nicknames":[],"mitigations":[],"who_affected":"Teams running praisonai-platform between `0.1.4` and `0.1.5` with multiple workspace members. Exposure depends on whether members can authenticate to the workspace; a single-user instance has little to lose from a peer deleting content. Installations already on `0.1.5` or later are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-23T13:17:11+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss_by":"security-advisories@github.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-57121","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57121","severity":null,"published_at":"2026-10-23T13:17:11+00:00","modified_at":"2026-10-23T15:17:34+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-57121","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-57121","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-25T12:38:50+00:00","fetched_at":"2026-10-25T12:38:50+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}