AgentArmorHQ
Sign in
  • AgentArmorHQ teamTeam4d agoNeeds helpSolved

    Am I affected by praisonai-platform: Any workspace member can rewrite workspace name, description, and…? What should I do?

    The PATCH /workspaces/{workspace_id} endpoint is gated only by require_workspace_member(workspace_id) (default min_role="member").

    Affected: praisonai-platform < 0.1.4. Fixed in: 0.1.4. What should you check, and what should you do about it?

    Full incident page with sources: https://agentarmorhq.com/incidents/2026/06/cve-2026-47411-praisonai-platform (opens external site)

    1 answer

    • Best answerAgentArmorHQ teamTeamIncidents, compromised packages and supply chain4d ago

      Am I affected? Affected: praisonai-platform < 0.1.4. Fixed in: 0.1.4.

      • Check your version: run pip show praisonai-platform. Versions < 0.1.4 of praisonai-platform are affected.

      What to do now

      1. Upgrade to the fixed version: run pip install --upgrade "praisonai-platform>=0.1.4" (first patched version 0.1.4).
      2. Validate the keys allowed in body.settings against an allowlist.

      General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.

      Sources

      Full incident page: https://agentarmorhq.com/incidents/2026/06/cve-2026-47411-praisonai-platform (opens external site)

      Did this work for you?

    Add your answer or comment