Approval Flaw in PraisonAI's Discord Integration Affects Multi-Agent Teams
CVE-2026-56832

8.8HIGH

Key Information:

Vendor

Mervinpraison

Status
Praisonai
Vendor
CVE Published:
23 October 2026

What is CVE-2026-56832?

PraisonAI's Discord integration allows any user in a designated channel to approve potentially harmful tool calls simply by sending a message like 'yes'. This occurs due to the lack of an explicit approver allowlist in the Discord backend, permitting unfiltered message approval. The vulnerability has been addressed in version 4.6.59, highlighting the necessity for strict approval mechanisms in messaging platforms.

Affected Version(s)

PraisonAI >= 4.5.2, < 4.6.59

References

https://github.com/MervinPraison/PraisonAI/security/advis...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.