{"schema":"threatline.record/2","record":{"id":"CVE-2026-56835","aliases":["GHSA-qvpf-j64c-jmhr","PYSEC-2026-3518"],"summary":"PraisonAI Slack app_mention bypasses configured user/channel authorization","details":"PraisonAI is a multi-agent teams system. From version 3.11.0 to before version 4.6.59, PraisonAI's Slack bot applies its configured allowed_users, allowed_channels, and unknown-user pairing policy in the normal Slack message event handler, but not in the adjacent Slack app_mention event handler. A Slack workspace user who can mention the bot in a channel where the Slack app is present can trigger the configured PraisonAI agent even when: the sender is not in BotConfig.allowed_users; the channel is not in BotConfig.allowed_channels; unknown_user_policy=\"deny\" is configured; and the same event content is correctly dropped by the normal message handler. This issue has been patched in version 4.6.59.","categories":["Libraries & packages"],"product":"PraisonAI","vendor":"MervinPraison","ecosystem":"PyPI","affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56835","source_modified_at":"2026-10-23T11:57:11.852Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"PraisonAI","vendor":"MervinPraison","versions":[{"status":"affected","version":">= 3.11.0, < 4.6.59"}],"defaultStatus":null},{"source":"GitHub Advisory Database","source_url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qvpf-j64c-jmhr","source_modified_at":"2026-06-24T01:45:18Z","fetched_at":"2026-10-24T10:48:42.330819Z","package":{"ecosystem":"pip","name":"praisonai"},"range":">= 3.11.0, <= 4.6.58"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-qvpf-j64c-jmhr","source_modified_at":"2026-07-23T15:11:23.177465510Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"ecosystem":"PyPI","name":"praisonai","purl":"pkg:pypi/praisonai"},"ranges":[{"events":[{"introduced":"3.11.0"},{"fixed":"4.6.59"}],"type":"ECOSYSTEM"}],"versions":["3.11.0","3.11.1","3.11.10","3.11.11","3.11.12","3.11.13","3.11.14","3.11.2","3.11.3","3.11.4","3.11.8","3.11.9","3.12.0","3.12.1","3.12.2","3.12.3","4.0.0","4.1.0","4.2.0","4.2.1","4.2.2","4.2.3","4.2.4","4.3.0","4.3.1","4.4.0","4.4.10","4.4.11","4.4.12","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.5.0","4.5.1","4.5.10","4.5.100","4.5.101","4.5.102","4.5.103","4.5.104","4.5.105","4.5.106","4.5.107","4.5.108","4.5.109"]}],"fixed_versions":[{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-qvpf-j64c-jmhr","source_modified_at":"2026-07-23T15:11:23.177465510Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"ecosystem":"PyPI","name":"praisonai","purl":"pkg:pypi/praisonai"},"version":"4.6.59"}],"cvss":8.3,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-23T11:57:11.852Z","modified_at":"2026-10-23T11:57:11.852Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-56835","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T11:57:11.852Z"},{"source":"GitHub Advisory Database","url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qvpf-j64c-jmhr","fetched_at":"2026-10-24T10:48:42.330819Z","source_modified_at":"2026-06-24T01:45:18Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-qvpf-j64c-jmhr","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-07-23T15:11:23.177465510Z"}],"sources":["CVE List","GitHub Advisory Database","OSV"],"references":[{"source":"CVE List","url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qvpf-j64c-jmhr","tags":["x_refsource_CONFIRM"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-23T11:57:11.852Z","content_hash":"7b37983ea6d5d0dde05bf1267606d59ff599b999eddb5a160699313d60e0d4f4"}}