CVE-2026-56832: CWE-345: Insufficient Verification of Data Authenticity in MervinPraison PraisonAI

CVE-2026-56832 describes an insufficient verification of data authenticity vulnerability (CWE-345) in MervinPraison's PraisonAI multi-agent teams system. Specifically, in versions >=4.5.2 and <4.6.59, the DiscordApproval component approves pending dangerous tool calls upon detecting any later non-bot message in the configured Discord channel whose text is classified as approval (e.g., 'yes'). The approval message does not need to be a reply or linked to the original request, enabling any user who can post in the approval channel to authorize high-risk actions. The Slack and Telegram backends also lack explicit approver allowlists but the main exploitable vector is the unthreaded Discord channel cross-talk. The issue is fixed in version 4.6.59.

An attacker with permission to post messages in the configured Discord approval channel can approve pending high-risk tool calls without explicit authorization, potentially leading to unauthorized execution of dangerous actions. This can result in full confidentiality, integrity, and availability compromise of the system as indicated by the CVSS impact metrics (C:H/I:H/A:H).

Upgrade PraisonAI to version 4.6.59 or later, where this vulnerability is patched. The fix addresses the insufficient verification by ensuring approval messages are properly bound to the approval request, preventing unthreaded cross-talk approvals. No other mitigations are specified or necessary once patched.