{"schema":"threatline.record/2","record":{"id":"CVE-2026-56838","aliases":["GHSA-v847-hxxw-3pxg","PYSEC-2026-3520"],"summary":"PraisonAI recipe.run_stream skips dangerous-tool policy enforcement","details":"PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.59, PraisonAI recipe execution blocks default-denied dangerous tools unless the caller explicitly passes allow_dangerous_tools=True. The normal recipe.run() path enforces this with _check_tool_policy(). The streaming path, recipe.run_stream(), loads the same recipe, checks dependencies, and then calls _execute_recipe() without running the dangerous-tool policy check. As a result, a recipe that honestly declares execute_command in TEMPLATE.yaml requires.tools is denied by recipe.run(), but reaches the execution engine through recipe.run_stream() with allow_dangerous_tools=False. This issue has been patched in version 4.6.59.","categories":["Libraries & packages"],"product":"PraisonAI","vendor":"MervinPraison","ecosystem":"PyPI","affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56838","source_modified_at":"2026-10-23T11:58:01.475Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"PraisonAI","vendor":"MervinPraison","versions":[{"status":"affected","version":">= 4.5.87, < 4.6.59"}],"defaultStatus":null},{"source":"GitHub Advisory Database","source_url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-v847-hxxw-3pxg","source_modified_at":"2026-06-24T01:45:39Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"ecosystem":"pip","name":"praisonai"},"range":">= 4.5.87, <= 4.6.57"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-v847-hxxw-3pxg","source_modified_at":"2026-07-23T15:11:26.264669943Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"PyPI","name":"praisonai","purl":"pkg:pypi/praisonai"},"ranges":[{"events":[{"introduced":"4.5.87"},{"fixed":"4.6.59"}],"type":"ECOSYSTEM"}],"versions":["4.5.100","4.5.101","4.5.102","4.5.103","4.5.104","4.5.105","4.5.106","4.5.107","4.5.108","4.5.109","4.5.110","4.5.111","4.5.112","4.5.113","4.5.114","4.5.115","4.5.117","4.5.118","4.5.119","4.5.120","4.5.121","4.5.122","4.5.123","4.5.124","4.5.125","4.5.126","4.5.127","4.5.128","4.5.129","4.5.130","4.5.131","4.5.132","4.5.133","4.5.134","4.5.135","4.5.136","4.5.137","4.5.139","4.5.140","4.5.143","4.5.144","4.5.145","4.5.149","4.5.87","4.5.88","4.5.89","4.5.90","4.5.93","4.5.94","4.5.95"]}],"fixed_versions":[{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-v847-hxxw-3pxg","source_modified_at":"2026-07-23T15:11:26.264669943Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"PyPI","name":"praisonai","purl":"pkg:pypi/praisonai"},"version":"4.6.59"}],"cvss":7.8,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-23T11:58:01.475Z","modified_at":"2026-10-23T11:58:01.475Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-56838","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T11:58:01.475Z"},{"source":"GitHub Advisory Database","url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-v847-hxxw-3pxg","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-06-24T01:45:39Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-v847-hxxw-3pxg","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-07-23T15:11:26.264669943Z"}],"sources":["CVE List","GitHub Advisory Database","OSV"],"references":[{"source":"CVE List","url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-v847-hxxw-3pxg","tags":["x_refsource_CONFIRM"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-23T11:58:01.475Z","content_hash":"d37ab41fbf0edd0af96218294baf69b2ecd2e8d74e00eb73496d206027895e97"}}