{"schema":"threatline.record/2","record":{"id":"CVE-2026-56840","aliases":["GHSA-63v4-w882-g4x2","PYSEC-2026-3503"],"summary":"PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools","details":"PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots.HTTPApproval renders pending tool approval arguments directly into the approval dashboard HTML. An attacker-controlled tool argument can inject JavaScript into that page. When a human opens the approval URL to inspect the risky tool request, the script runs in the dashboard origin and can POST to the same request's /approve/{request_id}/decide endpoint, causing HTTPApproval to return approved=True. This issue has been patched in version 4.6.59.","categories":["Libraries & packages"],"product":"PraisonAI","vendor":"MervinPraison","ecosystem":"PyPI","affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56840","source_modified_at":"2026-10-23T11:58:24.568Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"PraisonAI","vendor":"MervinPraison","versions":[{"status":"affected","version":">= 4.5.2, < 4.6.59"}],"defaultStatus":null},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-63v4-w882-g4x2","source_modified_at":"2026-07-23T15:11:47.942750129Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"praisonai","ecosystem":"PyPI","purl":"pkg:pypi/praisonai"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.5.2"},{"fixed":"4.6.59"}]}],"versions":["4.5.10","4.5.100","4.5.101","4.5.102","4.5.103","4.5.104","4.5.105","4.5.106","4.5.107","4.5.108","4.5.109","4.5.11","4.5.110","4.5.111","4.5.112","4.5.113","4.5.114","4.5.115","4.5.117","4.5.118","4.5.119","4.5.12","4.5.120","4.5.121","4.5.122","4.5.123","4.5.124","4.5.125","4.5.126","4.5.127","4.5.128","4.5.129","4.5.13","4.5.130","4.5.131","4.5.132","4.5.133","4.5.134","4.5.135","4.5.136","4.5.137","4.5.139","4.5.14","4.5.140","4.5.143","4.5.144","4.5.145","4.5.149","4.5.15","4.5.16"]}],"fixed_versions":[{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-63v4-w882-g4x2","source_modified_at":"2026-07-23T15:11:47.942750129Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"praisonai","ecosystem":"PyPI","purl":"pkg:pypi/praisonai"},"version":"4.6.59"}],"cvss":8.8,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-23T11:58:24.568Z","modified_at":"2026-10-23T11:58:24.568Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-56840","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T11:58:24.568Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-63v4-w882-g4x2","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-07-23T15:11:47.942750129Z"}],"sources":["CVE List","OSV"],"references":[{"source":"CVE List","url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-63v4-w882-g4x2","tags":["x_refsource_CONFIRM"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-23T11:58:24.568Z","content_hash":"f89c5ee09e7c43b612c298c22a306bfdc871712fa3273d1ffdb2fa064b78c95c"}}