{"vulnerability": "cve-2026-4740", "sightings": [{"uuid": "5f6989a6-d560-4ecf-8bd2-4017bca9b51d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4740", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miw3o7zjll2j", "content": "", "creation_timestamp": "2026-04-07T15:26:40.014833Z"}, {"uuid": "e190eedc-e84f-4161-bb97-3b0276f5718e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4740", "type": "published-proof-of-concept", "source": "Telegram/8eXn4QLj3W1_8AYc2pIsiDgfSWsuolTpz1YwE008yOgTXtw", "content": "", "creation_timestamp": "2026-04-07T17:29:14.000000Z"}, {"uuid": "29e79693-d987-42e5-a139-c430a6203836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47407", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-h8q5-cp56-rr65", "content": "", "creation_timestamp": "2026-05-19T06:35:50.000000Z"}, {"uuid": "c80a465a-82be-40f8-8c0e-ebf78d634124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47405", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-h37g-4h4p-9x97", "content": "", "creation_timestamp": "2026-05-19T06:35:48.000000Z"}, {"uuid": "d7b9638f-2a18-4fa2-8e05-bb7fc6587cd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47407", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6dgceyy523", "content": "CVE-2026-47407 - praisonai-platform\nA security issue in the PraisonAI Platform allows unauthorized access to data across workspaces, enabling users to view, update, or delete resources\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiplatform #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-07-21T17:28:06.696992Z"}, {"uuid": "cb89c38e-83ef-45ab-937b-f9b772d15a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47408", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gy5caw624", "content": "CVE-2026-47408 - praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownership\nCVE ID : CVE-2026-47408\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : PraisonAI Platform is the platform layer for the Prai...", "creation_timestamp": "2026-07-21T18:31:46.545744Z"}, {"uuid": "e1af62e4-8b6c-4fc1-8424-e37bb9252ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47406", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6hjik73j2g", "content": "CVE-2026-47406 - praisonai-platform: Dependency endpoints accept any issue_id and dep_id without workspace ownership check, cross-workspace issue linking + read + delete IDOR\nCVE ID : CVE-2026-47406\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : Prai...", "creation_timestamp": "2026-07-21T18:41:28.945004Z"}, {"uuid": "9e6eb02a-987c-46e7-b994-f20b4db70ecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47409", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6houl2rk2q", "content": "CVE-2026-47409 - praisonai-platform: Any workspace member can remove any other member (including the owner) via DELETE /workspaces/{id}/members/{user_id}\nCVE ID : CVE-2026-47409\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : PraisonAI Platform is the...", "creation_timestamp": "2026-07-21T18:44:28.983185Z"}, {"uuid": "a3d12af0-72a2-41b3-be93-c1145792ded3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47407", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6iv5bttl2j", "content": "CVE-2026-47407 - PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation\nCVE ID : CVE-2026-47407\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams syst...", "creation_timestamp": "2026-07-21T19:05:53.478013Z"}, {"uuid": "bc19cc07-999a-408f-bad2-90ff9e194f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47405", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6jpyp4ua2j", "content": "CVE-2026-47405 - PraisonAI Platform missing role checks let any workspace member become owner and take over workspace membership\nCVE ID : CVE-2026-47405\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : PraisonAI Platform is the platform layer for the P...", "creation_timestamp": "2026-07-21T19:20:54.614312Z"}]}