CVE-2026-56838

PraisonAI versions 4.5.87 through 4.6.57 are vulnerable to a policy enforcement bypass in the recipe.run_stream() function. While the standard recipe.run() path correctly invokes _check_tool_policy() to block dangerous tools unless allow_dangerous_tools=True is specified, the streaming path calls...