CVE-2026-56832 Details

A vulnerability exists in PraisonAI versions 4.5.2 prior to 4.6.59 within the Discord approval backend. The issue arises in the `praisonai.bots.DiscordApproval` component, which incorrectly approves high-risk tool calls based on unrelated messages in the designated approval channel. Specifically, any non-bot message containing approval language, such as 'yes', can be interpreted as an approval for a pending dangerous tool request. This flaw allows users with permission to post in the approval channel to approve risky tool executions by simply sending an approval-like response after the request has been introduced. The vulnerability is exacerbated by the absence of a specific approver allowlist for the Slack and Telegram backends, although their request-handling is more robust than Discord's. The issue has been resolved in PraisonAI version 4.6.59.

Users are advised to update to PraisonAI version 4.6.59 or later. Additionally, for Discord approvals, it is recommended to tie approvals to specific requests using Discord interactions or replies that reference the approval message, and to implement an explicit approver identity configuration.