CVE-2026-56835

The praisonai package (repository MervinPraison/PraisonAI) is vulnerable to an authorization bypass in its Slack bot integration. Specifically, the app_mention event handler (located in src/praisonai/praisonai/bots/slack.py) fails to enforce the allowed_users, allowed_channels, and unknown_user_p...