https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T06:43:42.203575+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-61440 CVE-2026-61440 — PraisonAI Platform before 0.1.9 Authorization Bypass via Label Endpoints 2026-10-06T06:43:42.220681+00:00

Affected: MervinPraison PraisonAI

PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues. Attackers with workspace member privileges can exploit PATCH and POST/DELETE endpoints to alter shared label taxonomy and manipulate issue-label associations without owner or admin authorization.