CVE-2026-56840: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in MervinPraison PraisonAI

PraisonAI versions >=4.5.2 and <4.6.59 contain a CWE-79 improper input neutralization vulnerability in the praisonai.bots.HTTPApproval module. Specifically, pending tool approval arguments are rendered directly into the approval dashboard HTML, enabling an attacker to inject JavaScript. When a human user views the approval URL, the injected script executes in the dashboard's origin and can send a POST request to the /approve/{request_id}/decide endpoint, causing the system to approve the request without proper authorization. This vulnerability has been fixed in version 4.6.59.

Successful exploitation allows an attacker to perform cross-site scripting that runs in the context of the approval dashboard. This can lead to unauthorized approval of tool requests, resulting in potential compromise of the approval process and escalation of privileges or unauthorized actions within PraisonAI. The CVSS 3.1 score is 8.8 (high), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability.

Upgrade PraisonAI to version 4.6.59 or later, where this vulnerability has been patched. No other mitigations are indicated by the vendor advisory. Users should ensure they do not use affected versions in production environments.