CVE-2026-47408 | MervinPraison PraisonAI up to 0.1.3 ActivityService ActivityService.list_for_issue issue_id resource injection

July 21, 2026 Yanac

A vulnerability, which was classified as problematic, was found in MervinPraison PraisonAI up to 0.1.3. Affected is the function ActivityService.list_for_issue of the component ActivityService. Such manipulation of the argument issue_id leads to improper control of resource identifiers.

This vulnerability is traded as CVE-2026-47408. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More