CVE-2026-62179
6.5 MEDIUMpublic exploit availablePublished 2026-10-07 · Updated 2026-10-07
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
PraisonAI is a multi-agent teams system. In `praisonai-platform` prior to version 0.1.9, issue dependency deletion can be authorized against the wrong side of a dependency edge. A workspace member cannot delete a dependency through the owner-created issue endpoint, but can delete the same dependency through a member-owned related issue endpoint because the route accepts either endpoint and checks delete permission only against the caller-selected URL issue. Version 0.1.9 patches the issue.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-862, CWE-863
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-100744PoC
- MEDIUMCVE-2026-100879PoC
- CRITICALCVE-2026-101000PoC
- LOWCVE-2026-101139PoC
- HIGHCVE-2026-102249PoC
- MEDIUMCVE-2026-104054PoC
- CRITICALCVE-2026-106511PoC
- MEDIUMCVE-2026-109524PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.