PT-2026-61757

Name of the Vulnerable Software and Affected Versions praisonai versions 4.5.2 through 4.6.58 Description The praisonai.bots.DiscordApproval component improperly handles approval requests for dangerous tool calls. It approves a pending request if any non-bot message containing approval text, such...

PT-2026-53129

DiscordApproval accepts unrelated channel messages as dangerous-tool approvals Summary praisonai.bots.DiscordApproval approves a pending dangerous tool call when it sees any later non-bot message in the configured Discord channel whose text is classified as approval, such as yes. The decision is...

PraisonAI 安全漏洞

PraisonAI is a low-code multi-agent collaboration framework developed by Mervin Praison. Versions of PraisonAI prior to 4.5.128 contained security vulnerabilities. These vulnerabilities stemmed from the/api/approval/allow-list endpoint, which unauthenticated modifications to the tool approval...