How many CVEs have patched delete?

12 published CVEs changed delete in MervinPraison/PraisonAI, in 3 distinct patches totalling 95 changed lines, between 2026 and 2026.

What is the latest CVE that changed delete?

CVE-2026-47418 (praisonai-platform: Project endpoints accept any project_id without workspace ownership check, cross-workspace read/update/delete IDOR), published 2026-07-21, changed lines 101 to 107 of src/praisonai-platform/praisonai_platform/services/workspace_service.py.

How does delete compare to the rest of MervinPraison/PraisonAI?

MervinPraison/PraisonAI has 29 CVEs with a located fix in total; 12 of them changed delete.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

delete in MervinPraison/PraisonAI: Patched by 12 CVEs

praisonai-platform: Project endpoints accept any project_id without workspace ownership check, cross-workspace read/update/delete IDOR

CVE-2026-47418 · src/praisonai-platform/praisonai_platform/services/workspace_service.py · lines 101–107 · +4 −1

High · CVSS 8.1

EPSS 0.4%2026-07-21

praisonai-platform: Label endpoints accept any label_id and any issue_id without workspace ownership check, cross-workspace label edit/delete and issue-label-link IDOR

CVE-2026-47414 · src/praisonai-platform/praisonai_platform/services/workspace_service.py · lines 101–107 · +4 −1

High · CVSS 7.6

EPSS 0.4%2026-07-21

praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id}

CVE-2026-47412 · src/praisonai-platform/praisonai_platform/services/agent_service.py · lines 114–118 · +4 −2

High · CVSS 8.1

EPSS 0.5%2026-07-21

praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id}

CVE-2026-47412 · src/praisonai-platform/praisonai_platform/services/project_service.py · lines 97–101 · +4 −2

High · CVSS 8.1

EPSS 0.5%2026-07-21

praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset

CVE-2026-47410 · src/praisonai-platform/praisonai_platform/services/workspace_service.py · lines 101–107 · +4 −1

Critical · CVSS 9.8

EPSS 0.6%2026-07-21

praisonai-platform: Any workspace member can remove any other member (including the owner) via DELETE /workspaces/{id}/members/{user_id}

CVE-2026-47409 · src/praisonai-platform/praisonai_platform/services/agent_service.py · lines 114–118 · +4 −2

High · CVSS 8.1

EPSS 0.5%2026-07-21

praisonai-platform: Any workspace member can remove any other member (including the owner) via DELETE /workspaces/{id}/members/{user_id}

CVE-2026-47409 · src/praisonai-platform/praisonai_platform/services/project_service.py · lines 97–101 · +4 −2

High · CVSS 8.1

EPSS 0.5%2026-07-21

praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownership

CVE-2026-47408 · src/praisonai-platform/praisonai_platform/services/workspace_service.py · lines 101–107 · +4 −1

Medium · CVSS 6.5

EPSS 0.4%2026-07-21

PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation

CVE-2026-47407 · src/praisonai-platform/praisonai_platform/services/agent_service.py · lines 114–118 · +4 −2

Critical · CVSS 9.4

EPSS 0.4%2026-07-21

PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation

CVE-2026-47407 · src/praisonai-platform/praisonai_platform/services/project_service.py · lines 97–101 · +4 −2

Critical · CVSS 9.4

EPSS 0.4%2026-07-21

praisonai-platform: Dependency endpoints accept any issue_id and dep_id without workspace ownership check, cross-workspace issue linking + read + delete IDOR

CVE-2026-47406 · src/praisonai-platform/praisonai_platform/services/workspace_service.py · lines 101–107 · +4 −1

High · CVSS 8.1

EPSS 0.4%2026-07-21

PraisonAI Platform missing role checks let any workspace member become owner and take over workspace membership

CVE-2026-47405 · src/praisonai-platform/praisonai_platform/services/agent_service.py · lines 114–118 · +4 −2

High · CVSS 8.8

EPSS 0.5%2026-07-21

PraisonAI Platform missing role checks let any workspace member become owner and take over workspace membership

CVE-2026-47405 · src/praisonai-platform/praisonai_platform/services/project_service.py · lines 97–101 · +4 −2

High · CVSS 8.8

EPSS 0.5%2026-07-21

PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID

CVE-2026-47399 · src/praisonai-platform/praisonai_platform/services/agent_service.py · lines 114–118 · +4 −2

High · CVSS 8.8

EPSS 0.5%2026-07-21

PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID

CVE-2026-47399 · src/praisonai-platform/praisonai_platform/services/project_service.py · lines 97–101 · +4 −2

High · CVSS 8.8

EPSS 0.5%2026-07-21

PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334

CVE-2026-47398 · src/praisonai-platform/praisonai_platform/services/workspace_service.py · lines 101–107 · +4 −1

High · CVSS 8.1

EPSS 0.6%2026-07-21

PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default

CVE-2026-47393 · src/praisonai-platform/praisonai_platform/services/workspace_service.py · lines 101–107 · +4 −1

Critical · CVSS 9.8

EPSS 0.8%2026-07-21

delete

Overview

CVEs that patched it

Other functions in these files

Other hotspots in the repository

Frequently asked questions

References

Track MervinPraison/PraisonAI CVEs