Tools AI Risk Radar ai-incident-0149
Incident record
PraisonAI fixes unauthorised deletion of issue dependencies
- Severity
- Medium
- Status
- Patched
- Type
- Infra Vuln
- Target
- praisonai-platform
- Actor
- researcher
- CVE
- CVE-2026-62179
What happened
A workspace member could remove a dependency from an owner-created issue by accessing it through a related issue that the member owned. Permission was checked against the wrong end of the relationship.
praisonai-platform: affected <= 0.1.8; fixed in 0.1.9. The date shown is the maintainer’s original disclosure date. Its advisory assigns 6.5 under CVSS 3.1.
Sources
- Primary disclosuregithub.com/MervinPraison/PraisonAI/security/advisories/GHSA-…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026