CVE-2026-56832

The PraisonAI multi-agent system (versions 4.5.2 through 4.6.58 ) contains an incorrect authorization vulnerability in its DiscordApproval backend. The praisonai.bots.DiscordApproval component improperly handles tool call approvals by polling the configured Discord channel for any non-bot message...

CVE-2026-56832 PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals

PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots.DiscordApproval approves a pending dangerous tool call when it sees any later non-bot message in the configured Discord channel whose text is classified as approval, such as yes. As a result, any...

GHSA-8579-RGG5-PH2M PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals

DiscordApproval accepts unrelated channel messages as dangerous-tool approvals Summary praisonai.bots.DiscordApproval approves a pending dangerous tool call when it sees any later non-bot message in the configured Discord channel whose text is classified as approval, such as yes. The decision is...