What is CVE-2026-48169?

CVE-2026-48169 is a high-severity vulnerability in Mervinpraison Praisonai-platform, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 8.8/10. Published 2026-08-07.

How severe is CVE-2026-48169?

High severity. CVSS v3 base score is 8.8 out of 10.

Auth bypass in Mervinpraison Praisonai-platform

CVE-2026-48169

PraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the PraisonAI Platform API have two authorization failures that together break workspace isolation. The service layer for issues and projects performs global primary-key l…

Vulnerability class: IDOR (Insecure Direct Object Reference)

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Mervinpraison Praisonai-platform — versions < 0.1.4

Weakness classification (CWE)

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2026-48169?: CVE-2026-48169 is a high-severity vulnerability in Mervinpraison Praisonai-platform, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 8.8/10. Published 2026-08-07.
How severe is CVE-2026-48169?: High severity. CVSS v3 base score is 8.8 out of 10.