CVE-2026-56835 PraisonAI Slack app_mention bypasses configured user/channel authorization
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2026-56835?
CVE-2026-56835 is a high-severity vulnerability in MervinPraison PraisonAI, published on 23 Oct 2026.
Official description
PraisonAI is a multi-agent teams system. From version 3.11.0 to before version 4.6.59, PraisonAI's Slack bot applies its configured allowed_users, allowed_channels, and unknown-user pairing policy in the normal Slack message event handler, but not in the adjacent Slack app_mention event handler. A Slack workspace user who can mention the bot in a channel where the Slack app is present can trigger the configured PraisonAI agent even when: the sender is not in BotConfig.allowed_users; the channel is not in BotConfig.allowed_channels; unknown_user_policy="deny" is configured; and the same event content is correctly dropped by the normal message handler. This issue has been patched in version 4.6.59.
Which versions are affected by CVE-2026-56835?
3 open source packages ship an affected version, including praisonai.
| Package | Affected | Fixed in |
|---|---|---|
praisonai PyPI | From 3.11.0 | 4.6.59 |
praisonai PyPI | From 3.11.0 | 4.6.59 |
praisonai PyPI | From 3.11.0 | 4.6.59 |
How do I fix CVE-2026-56835?
Upgrade praisonai to 4.6.59 or later.
Is CVE-2026-56835 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-56835 exists.
Sources
Also known as GHSA-qvpf-j64c-jmhr, PYSEC-2026-3518.