Beveiligingsadvies

CVE-2026-61440

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-15 11:25:41

Laatst bijgewerkt 2026-07-18 01:01:50

Toegewezen door VulnCheck

CVSS-score 7.1

Status PUBLISHED

Beschrijving

PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues. Attackers with workspace member privileges can exploit PATCH and POST/DELETE endpoints to alter shared label taxonomy and manipulate issue-label associations without owner or admin authorization.

← Alle CVE's bekijken Bekijk op cve.org ↗