All vulnerabilities
CVE-2026-56835GHSA-qvpf-j64c-jmhrPYSEC-2026-3518

PraisonAI Slack app_mention bypasses configured user/channel authorization

MervinPraison PraisonAIPyPILibraries & packages
Open in ThreatlineRecord JSON
CVSS
8.3High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in4.6.59Fixed versionOSV
Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

  • 4.6.59praisonai, PyPIOSVpip install "praisonai>=4.6.59"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

PraisonAI is a multi-agent teams system. From version 3.11.0 to before version 4.6.59, PraisonAI's Slack bot applies its configured allowed_users, allowed_channels, and unknown-user pairing policy in the normal Slack message event handler, but not in the adjacent Slack app_mention event handler. A Slack workspace user who can mention the bot in a channel where the Slack app is present can trigger the configured PraisonAI agent even when: the sender is not in BotConfig.allowed_users; the channel is not in BotConfig.allowed_channels; unknown_user_policy="deny" is configured; and the same event content is correctly dropped by the normal message handler. This issue has been patched in version 4.6.59.

Text from CVE List

Affected versions 52

  • PraisonAIaffected: >= 3.11.0, < 4.6.59CVE List
  • praisonai, PyPIfrom 3.11.0, fixed in 4.6.59OSV
  • praisonai, PyPI3.11.0OSV
  • praisonai, PyPI3.11.1OSV
  • praisonai, PyPI3.11.10OSV
  • praisonai, PyPI3.11.11OSV
  • praisonai, PyPI3.11.12OSV
  • praisonai, PyPI3.11.13OSV
  • praisonai, PyPI3.11.14OSV
  • praisonai, PyPI3.11.2OSV
  • praisonai, PyPI3.11.3OSV
  • praisonai, PyPI3.11.4OSV
  • praisonai, PyPI3.11.8OSV
  • praisonai, PyPI3.11.9OSV
  • praisonai, PyPI3.12.0OSV
  • praisonai, PyPI3.12.1OSV
  • praisonai, PyPI3.12.2OSV
  • praisonai, PyPI3.12.3OSV
  • praisonai, PyPI4.0.0OSV
  • praisonai, PyPI4.1.0OSV
  • praisonai, PyPI4.2.0OSV
  • praisonai, PyPI4.2.1OSV
  • praisonai, PyPI4.2.2OSV
  • praisonai, PyPI4.2.3OSV
  • praisonai, PyPI4.2.4OSV
  • praisonai, PyPI4.3.0OSV
  • praisonai, PyPI4.3.1OSV
  • praisonai, PyPI4.4.0OSV
  • praisonai, PyPI4.4.10OSV
  • praisonai, PyPI4.4.11OSV
  • praisonai, PyPI4.4.12OSV
  • praisonai, PyPI4.4.2OSV
  • praisonai, PyPI4.4.3OSV
  • praisonai, PyPI4.4.4OSV
  • praisonai, PyPI4.4.5OSV
  • praisonai, PyPI4.4.6OSV
  • praisonai, PyPI4.4.7OSV
  • praisonai, PyPI4.4.8OSV
  • praisonai, PyPI4.4.9OSV
  • praisonai, PyPI4.5.0OSV
  • praisonai, PyPI4.5.1OSV
  • praisonai, PyPI4.5.10OSV
  • praisonai, PyPI4.5.100OSV
  • praisonai, PyPI4.5.101OSV
  • praisonai, PyPI4.5.102OSV
  • praisonai, PyPI4.5.103OSV
  • praisonai, PyPI4.5.104OSV
  • praisonai, PyPI4.5.105OSV
  • praisonai, PyPI4.5.106OSV
  • praisonai, PyPI4.5.107OSV
  • praisonai, PyPI4.5.108OSV
  • praisonai, PyPI4.5.109OSV

References 1