{"id":"CVE-2026-62179","title":"PraisonAI is a multi-agent teams system","summary":"PraisonAI is a multi-agent teams system. In `praisonai-platform` prior to version 0.1.9, issue dependency deletion can be authorized against the wrong side of a dependency edge. A workspace member cannot delete a dependency through the o…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-862","CWE-863"],"vendor":"praisonai-platform","product":"praisonai-platform","affected":["praisonai-platform <= 0.1.8"],"patched":["praisonai-platform 0.1.9"],"published":"2026-10-07","updated":"2026-10-07","sourceUpdated":"2026-10-07T15:17:23.073","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-62179","references":[{"url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-mxmx-rh57-jx58","label":"security-advisories@github.com"},{"url":"https://github.com/advisories/GHSA-mxmx-rh57-jx58"}],"tags":["nvd","ghsa","pip","cve.org"],"aliases":["GHSA-mxmx-rh57-jx58"],"ecosystem":"pip","ingestedAt":"2026-10-07T14:33:21.957Z","slug":"CVE-2026-62179","body":"## Overview\n\nPraisonAI is a multi-agent teams system. In `praisonai-platform` prior to version 0.1.9, issue dependency deletion can be authorized against the wrong side of a dependency edge. A workspace member cannot delete a dependency through the owner-created issue endpoint, but can delete the same dependency through a member-owned related issue endpoint because the route accepts either endpoint and checks delete permission only against the caller-selected URL issue. Version 0.1.9 patches the issue.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2026-62179)\n\nAffected packages:\n\n- `praisonai-platform <= 0.1.8`\n\nPatched in:\n\n- `praisonai-platform 0.1.9`\n\nSource: https://github.com/advisories/GHSA-mxmx-rh57-jx58","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}