Vulnerability in PraisonAI Slack Bot Affects User Permissions in Multi-Agent Teams System
CVE-2026-56835

8.3HIGH

Key Information:

Vendor

Mervinpraison

Status
Praisonai
Vendor
CVE Published:
23 October 2026

What is CVE-2026-56835?

The PraisonAI system's Slack bot improperly applies user permission policies when handling Slack app mention events. From version 3.11.0 to before version 4.6.59, if a user mentions the bot in a channel where the app is active, they can trigger the bot even if they are not included in the allowed users list or channel configurations. This exploit occurs despite the normal message event handler correctly blocking unauthorized access. Updates in version 4.6.59 rectify this issue, reinforcing the app's user permission checks.

Affected Version(s)

PraisonAI >= 3.11.0, < 4.6.59

References

https://github.com/MervinPraison/PraisonAI/security/advis...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.