{"vulnerability": "cve-2026-4741", "sightings": [{"uuid": "a2154616-0949-490d-bae5-2a01d96c6d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4741", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhrymdoqpb2p", "content": "", "creation_timestamp": "2026-03-24T06:55:56.797985Z"}, {"uuid": "78955b41-4f41-41c3-affa-37fc3c4ece95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4741", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4741", "content": "", "creation_timestamp": "2026-03-24T03:17:29.000000Z"}, {"uuid": "38b91d90-fd73-499c-b7b3-5cd2195f285e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47410", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6djsm3uo2q", "content": "CVE-2026-47410 - praisonai-platform\nThe praisonai-platform uses a default secret key for signing JWTs, which can be easily obtained by an attacker. This allows them to create fake\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiplatform #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-07-21T17:30:04.216248Z"}, {"uuid": "13a91786-f77c-48b2-a9fa-c2ac6c161423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47413", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6grjt6ye23", "content": "CVE-2026-47413 - praisonai-platform\nA vulnerability in praisonai-platform allows any workspace member to add any user, including new or existing accounts, as the owner of the workspace. This means a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiplatform #pip #CVE #infosec", "creation_timestamp": "2026-07-21T18:28:04.820256Z"}, {"uuid": "006dfa23-d680-432c-9c72-3cd3cafe4fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47416", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6grl2i6t2r", "content": "CVE-2026-47416 - praisonai-platform\nA security weakness in praisonai-platform allows any workspace member to promote themselves or others to owner. This means that someone with minimal access can gain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiplatform #pip #CVE #infosec", "creation_timestamp": "2026-07-21T18:28:05.850276Z"}, {"uuid": "2824e1e7-1669-4837-97a9-005752af48d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47410", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6j63qcax23", "content": "CVE-2026-47410 - praisonai-platform: JWT signing key defaults to hardcoded \"dev-secret-change-me\", allowing token forgery for any user when PLATFORM_ENV is unset\nCVE ID : CVE-2026-47410\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : PraisonAI Platfor...", "creation_timestamp": "2026-07-21T19:10:53.869442Z"}, {"uuid": "3383c5f7-89cf-43c5-95a1-07f5e4dbd276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47419", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6kb7tahr2i", "content": "CVE-2026-47419 - praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDOR\nCVE ID : CVE-2026-47419\n \n Published : July 21, 2026, 6:17 p.m. | 19\u00a0minutes ago\n \n Description : PraisonAI Platform is the platf...", "creation_timestamp": "2026-07-21T19:30:32.594961Z"}, {"uuid": "f2bf33be-e7e5-4f37-9843-b999d2f831fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6kczhtvo2o", "content": "CVE-2026-47412 - praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id}\nCVE ID : CVE-2026-47412\n \n Published : July 21, 2026, 6:16 p.m. | 19\u00a0minutes ago\n \n Description : PraisonAI Platform is the platform layer for the PraisonAI mu...", "creation_timestamp": "2026-07-21T19:31:32.779500Z"}, {"uuid": "c2de6b65-8ba0-49f4-89fe-0a551f770902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47413", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6l2eo5mi22", "content": "CVE-2026-47413 - praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members\nCVE ID : CVE-2026-47413\n \n Published : July 21, 2026, 6:17 p.m. | 19\u00a0minutes ago\n \n Description : PraisonAI Platform is the platform layer for the Praiso...", "creation_timestamp": "2026-07-21T19:44:36.328203Z"}, {"uuid": "70c886f5-2e63-4993-a7f4-2144e56b912f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47418", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6ldd6txf27", "content": "CVE-2026-47418 - praisonai-platform: Project endpoints accept any project_id without workspace ownership check, cross-workspace read/update/delete IDOR\nCVE ID : CVE-2026-47418\n \n Published : July 21, 2026, 6:17 p.m. | 19\u00a0minutes ago\n \n Description : PraisonAI Platform is the p...", "creation_timestamp": "2026-07-21T19:49:36.648692Z"}, {"uuid": "30b60078-3abf-49e3-9124-3aedb0896a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47417", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6lmboszb2j", "content": "CVE-2026-47417 - praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDOR\nCVE ID : CVE-2026-47417\n \n Published : July 21, 2026, 6:17 p.m. | 19\u00a0minutes ago\n \n Description : PraisonAI Platform is the ...", "creation_timestamp": "2026-07-21T19:54:37.089340Z"}, {"uuid": "72ea33bf-7959-48ef-a238-8ac5b768fd7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47416", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6lvabput2s", "content": "CVE-2026-47416 - praisonai-platform: Any workspace member can promote themselves (or any other member) to owner via PATCH /workspaces/{id}/members/{user_id}\nCVE ID : CVE-2026-47416\n \n Published : July 21, 2026, 6:17 p.m. | 19\u00a0minutes ago\n \n Description : PraisonAI Platform is ...", "creation_timestamp": "2026-07-21T19:59:37.792545Z"}, {"uuid": "eb59d820-c454-46f4-92a1-545eddd60206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47413", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6lxqjrif2c", "content": "\ud83d\udd34 CVE-2026-47413 - Critical (9.6)\n\nPraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions pri...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47413/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-21T20:01:02.717862Z"}, {"uuid": "1d3b2239-97c8-491b-bf05-423cf6cefcd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47415", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6m675y5x2e", "content": "CVE-2026-47415 - praisonai-platform: Issue endpoints accept any issue_id without workspace ownership check, cross-workspace read/update/delete IDOR\nCVE ID : CVE-2026-47415\n \n Published : July 21, 2026, 6:17 p.m. | 19\u00a0minutes ago\n \n Description : PraisonAI Platform is the platf...", "creation_timestamp": "2026-07-21T20:04:38.597906Z"}]}