What happened
NVD published CVE-2026-48169 (CVSS 8.8, High) on August 7, 2026, detailing two chained authorization failures that together defeat workspace isolation in the PraisonAI multi-agent platform.
Why it matters
In a multi-tenant agentic-AI SaaS platform, broken workspace isolation is a direct violation of the tenant boundary any enterprise customer relies on — an attacker with any account on the platform can pivot into arbitrary other customers' agent workspaces, data, and administrative control.
Attack vector
The service layer for issues and projects performs global primary-key lookups without checking workspace ownership, so any authenticated user can read, modify, and delete resources in any workspace by manipulating UUIDs in API requests. Separately, member-management endpoints (add, update role, remove) lack proper ownership checks, letting a low-privilege member promote themselves to owner and remove legitimate owners.
Affected systems
PraisonAI Platform API prior to version 0.1.4
Mitigation
Upgrade to PraisonAI Platform API version 0.1.4 or later, which restores workspace-scoped authorization checks.