CVE-2026-58653 PraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/Update
Attackers can create or update issues referencing projects from other workspaces, causing cross-tenant data pollution in PraisonAI.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-58653?
CVE-2026-58653 is a medium-severity missing authorization vulnerability in PraisonAI, published on 2 Jul 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
PraisonAI before 0.1.7 fails to validate that project_id in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace constraints.
Weakness: CWE-639
Which versions are affected by CVE-2026-58653?
2 open source packages ship an affected version, including praisonai-platform.
| Package | Affected | Fixed in |
|---|---|---|
praisonai-platform PyPI | All versions | 0.1.8 |
praisonai-platform PyPI | All versions | 0.1.8 |
How do I fix CVE-2026-58653?
Upgrade praisonai-platform to 0.1.8 or later.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-58653 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-58653 exists.
Sources
Also known as GHSA-2fjj-qqg8-fg7x, GHSA-gggm-v68x-qqwv.