CVE-2026-56840

PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots.HTTPApproval renders pending tool approval arguments directly into the approval dashboard HTML. An attacker-controlled tool argument can inject JavaScript into that page. When a human opens the approval URL to inspect the risky tool request, the script runs in the dashboard origin and can POST to the same request's /approve/{request_id}/decide endpoint, causing HTTPApproval to return approved=True. This issue has been patched in version 4.6.59.

• CWE-79

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-63v4-w882-g4x2
• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-63v4-w882-g4x2

Published

Oct 23, 2026

Last Modified

Oct 29, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-56835PraisonAI is a multi-agent teams system. From version 3.11.0…8.3
• CVE-2026-56836PraisonAI is a multi-agent teams system. From version 4.5.11…8.2
• CVE-2026-56837PraisonAI is a multi-agent teams system. From version 4.6.56…8.6
• CVE-2026-56838PraisonAI is a multi-agent teams system. From version 4.5.87…7.8
• CVE-2026-56839PraisonAI is a multi-agent teams system. Prior to 4.6.59, th…7.3
• CVE-2026-5684A vulnerability was determined in Tenda CX12L 16.03.53.12. A…8
• CVE-2026-56841A malicious actor with access to the network and low privile…8.8
• CVE-2026-56842A malicious actor with access to the network and under certa…7.5
• CVE-2026-56843Incorrect authorization in the XML-RPC API of WebPros Plesk …9.9
• CVE-2026-56844A vulnerability in the Veeam Updater component of the Veeam …8.4
• CVE-2026-56845An unauthenticated path traversal (LFI) vulnerability exists…7.5
• CVE-2026-56846A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained …7.5