Is CVE-2026-56840 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-56840 being exploited in the wild.

How severe is CVE-2026-56840?

High severity, with a CVSS score of 8.8, published 23 October 2026.

Which products and versions are affected?

Praisonai 4.5.2 to 4.6.57; praisonai (PyPI) ECOSYSTEM:introduced=4.5.2,fixed=4.6.59.

Is there a fix for CVE-2026-56840?

Yes. praisonai (PyPI): upgrade to 4.6.59 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-56840 attacked?

It is attacked over the network.

Am I affected by CVE-2026-56840?

Check whether you run Praisonai or praisonai (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-56840: PraisonAI HTTPApproval dashboard XSS and auto-approval

CVE-2026-56840 · Severity: high · CVSS 8.8 · Published 2026-10-23

PraisonAI is a multi-agent AI system that includes an approval mechanism to let humans review risky tool requests before execution. A flaw in the approval dashboard allows an attacker to inject malicious code that automatically approves dangerous tool requests, bypassing the safety control that would normally require human review.

Technologies: Praisonai, praisonai (PyPI). Vendors: Praison, PyPI.

Quick answers

Is CVE-2026-56840 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-56840 being exploited in the wild.
How severe is CVE-2026-56840?: High severity, with a CVSS score of 8.8, published 23 October 2026.
Which products and versions are affected?: Praisonai 4.5.2 to 4.6.57; praisonai (PyPI) ECOSYSTEM:introduced=4.5.2,fixed=4.6.59.
Is there a fix for CVE-2026-56840?: Yes. praisonai (PyPI): upgrade to 4.6.59 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-56840 attacked?: It is attacked over the network.
Am I affected by CVE-2026-56840?: Check whether you run Praisonai or praisonai (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

praisonai (PyPI): upgrade to 4.6.59 or later
```
pip install "praisonai>=4.6.59"
```

Technical details

The HTTPApproval component renders pending tool approval arguments directly into dashboard HTML without HTML escaping, enabling stored XSS injection via tool arguments. When a human opens the approval URL, injected JavaScript executes in the dashboard origin and can POST to the /approve/{request_id}/decide endpoint to auto-approve the request. The vulnerability exists in src/praisonai/bots/_http_approval.py where _build_html() uses unescaped f-string interpolation for arguments and the page contains same-origin code that submits approvals.

Affected products

Praison PraisonAI 4.5.2 to 4.6.57

Identifiers

CVE-2026-56840
GHSA-63v4-w882-g4x2
PYSEC-2026-3503

Timeline

2026-06-17: disclosed
2026-10-23: advisory: NVD published

References

https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-63v4-w882-g4x2

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.