https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T00:21:52.615062+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338599 EUVD-2026-338599 2026-10-06T00:21:52.660910+00:00 EUVD-2026-338599 https://cve.radiocsirt.org/vuln/fkie_cve-2026-61440 fkie_cve-2026-61440 2026-10-06T00:21:52.660945+00:00

PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues. Attackers with workspace member privileges can exploit PATCH and POST/DELETE endpoints to alter shared label taxonomy and manipulate issue-label associations without owner or admin authorization.

 https://cve.radiocsirt.org/vuln/ghsa-vp55-5c2v-3597 GHSA-vp55-5c2v-3597 2026-10-06T00:21:52.660977+00:00

PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues. Attackers with workspace member privileges can exploit PATCH and POST/DELETE endpoints to alter shared label taxonomy and manipulate issue-label associations without owner or admin authorization.