CVE-2026-61441 PraisonAI Platform before 0.1.9 Authorization Bypass via Dependencies
Workspace members can bypass authorization checks to delete issue dependencies owned by others by targeting member-owned endpoints.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-61441?
CVE-2026-61441 is a high-severity missing authorization vulnerability in MervinPraison PraisonAI, published on 10 Jul 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
PraisonAI Platform (praisonai-platform) before 0.1.9 improperly authorizes deletion of issue dependencies. The DELETE dependency route accepts either endpoint of a dependency edge and checks delete permission only against the caller-selected URL issue. A workspace member who cannot delete a dependency through an owner-created issue endpoint (which returns 403) can delete the same dependency edge by targeting a related member-owned issue endpoint, because permission is validated against the member-owned issue's owner. This allows members to bypass owner/admin authorization and remove owner-created issue dependencies.
Weakness: CWE-862
Which versions are affected by CVE-2026-61441?
How do I fix CVE-2026-61441?
Upgrade to a fixed version.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-61441 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-61441 exists.
Sources
Also known as GHSA-gp44-qpw6-vj4x.