{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/praisonai--4.5.87--4.6.59/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:praisonai:praisonai:*:*:*:*:*:*:*:*","cpe:2.3:a:praison:praisonai:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-56832"},{"cvss":7.5,"id":"CVE-2026-56834"},{"cvss":8.3,"id":"CVE-2026-56835"},{"cvss":8.2,"id":"CVE-2026-56836"},{"cvss":8.6,"id":"CVE-2026-56837"},{"cvss":7.8,"id":"CVE-2026-56838"},{"cvss":8.8,"id":"CVE-2026-56840"},{"cvss":8.1,"id":"CVE-2026-57113"},{"id":"CVE-2026-57114"},{"id":"CVE-2026-57117"},{"id":"CVE-2026-57142"},{"id":"CVE-2026-57144"},{"id":"CVE-2026-57146"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["PraisonAI (4.5.2 to before 4.6.59)","PraisonAI (3.8.1 - 4.6.58)","PraisonAI (\u003e= 3.11.0, \u003c 4.6.59)","PraisonAI (\u003e= 4.5.112, \u003c 4.6.59)","PraisonAI (\u003e= 4.6.56, \u003c 4.6.59)","PraisonAI (\u003e= 4.5.87, \u003c 4.6.59)","praisonai (4.5.2 to \u003c 4.6.59)","PraisonAI (2.6.0 - 4.6.58)","PraisonAI (\u003e= 4.5.126, \u003c 4.6.59)","PraisonAI (\u003e= 4.6.10, \u003c 4.6.59)","PraisonAI (\u003e= 4.5.87, \u003c 4.6.61)","PraisonAI (\u003e= 4.5.110, \u003c 4.6.61)","PraisonAI (\u003e= 4.5.115, \u003c 4.6.61)"],"_cs_severities":["high"],"_cs_tags":["authentication-bypass","api-security","praisonai","path-traversal","vulnerability","file-deletion"],"_cs_type":"advisory","_cs_vendors":["PraisonAI"],"content_html":"\u003cp\u003ePraisonAI, a multi-agent teams system, contains an authorization bypass vulnerability (CVE-2026-56832) affecting versions 4.5.2 to before 4.6.59. The issue involves the Discord, Slack, and Telegram messaging approval backends. In the Discord backend, any user who can post in the configured approval channel can approve a pending high-risk tool call by sending \u0026quot;yes\u0026quot; because the system does not require the message to be a reply or request-bound. Slack and Telegram backends lack an explicit approver allowlist parameter. This issue was patched in version 4.6.59.\u003c/p\u003e\n","date_modified":"2026-10-29T19:57:40Z","date_published":"2026-10-23T13:40:25Z","id":"https://feed.craftedsignal.io/briefs/2026-10-praisonai-auth-bypass/","summary":"PraisonAI versions 4.5.2 to before 4.6.59 contain an authorization bypass vulnerability in Discord, Slack, and Telegram approval backends, allowing unauthorized users to approve high-risk multi-agent tool calls.","title":"PraisonAI: Authorization bypass in approval backends (CVE-2026-56832)","url":"https://feed.craftedsignal.io/briefs/2026-10-praisonai-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - PraisonAI (\u003e= 4.5.87, \u003c 4.6.59)","version":"https://jsonfeed.org/version/1.1"}