CVE-2026-57121 PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2026-57121?
CVE-2026-57121 is a high-severity vulnerability in MervinPraison PraisonAI, published on 23 Oct 2026.
Official description
PraisonAI is a multi-agent teams system. From version 0.1.4 to before version 0.1.5 in praisonai-platform, a workspace member can permanently delete any resource — projects, agents, issues, labels, issue dependencies, and issue-label attachments — created by the workspace owner or other members. All six content DELETE endpoints enforce workspace membership but perform no ownership or role check. A single malicious or compromised member account can wipe an entire workspace's content irreversibly. This issue has been patched in version 0.1.5.
Weakness: CWE-285
Which versions are affected by CVE-2026-57121?
3 open source packages ship an affected version, including praisonai-platform.
| Package | Affected | Fixed in |
|---|---|---|
praisonai-platform PyPI | From 0.1.4 | 0.1.6 |
praisonai-platform PyPI | From 0.1.4 | 0.1.6 |
praisonai-platform PyPI | From 0.1.4 | 0.1.6 |
How do I fix CVE-2026-57121?
Upgrade praisonai-platform to 0.1.6 or later.
Is CVE-2026-57121 being exploited?
There is no known exploitation of CVE-2026-57121 in the wild and no public exploit code.
Sources
Also known as GHSA-rh39-9c67-59mh, PYSEC-2026-3526.