Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 18:41:44 +0000 CVE-2026-58653 — PraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/Update https://cve.radiocsirt.org/vuln/cve-2026-58653 <p><strong>Affected:</strong> PraisonAI</p> <p>PraisonAI before 0.1.7 fails to validate that project_id in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace constraints.</p> <p><strong>Affected:</strong> PraisonAI</p> <p>PraisonAI before 0.1.7 fails to validate that project_id in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace constraints.</p> https://cve.radiocsirt.org/vuln/cve-2026-58653