CVE-2026-56840 MervinPraison CVE debrief

Who should care

Defenders and administrators of PraisonAI instances should assess exposure and prioritize remediation. They should verify PraisonAI version and exposure, remediate vulnerable instances to version 4.6.59 or later, and monitor for suspicious activity on the approval dashboard.

Why it matters

CVE-2026-56840 is a high-severity vulnerability in PraisonAI's HTTPApproval dashboard, allowing an attacker to inject JavaScript and approve dangerous tools. Defenders should prioritize verifying exposure and remediating vulnerable PraisonAI instances.

• An attacker can inject JavaScript into the approval dashboard.
• The injected script can POST to the /approve/{request_id}/decide endpoint.
• An attacker can cause HTTPApproval to return approved=True for a dangerous tool.
• Defenders should verify exposure and remediate vulnerable instances.

Technical summary

The PraisonAI HTTPApproval dashboard renders tool arguments as raw HTML, allowing an attacker to inject JavaScript and approve dangerous tools. The issue affects versions 4.5.2 to 4.6.58 and is patched in version 4.6.59. An attacker-controlled tool argument can inject JavaScript into the approval dashboard HTML. When a human opens the approval URL to inspect the risky tool request, the script runs in the dashboard origin and can POST to the same request's /approve/{request_id}/decide endpoint, causing HTTPApproval to return approved=True.

Defensive priority

Defenders should prioritize verifying exposure and remediating vulnerable PraisonAI instances.

Recommended defensive actions

• Verify PraisonAI version and exposure
• Remediate vulnerable instances to version 4.6.59 or later
• Monitor for suspicious activity on the approval dashboard
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and source item provide details on the vulnerability, affected versions, and patch information. The vulnerability affects PraisonAI versions 4.5.2 to 4.6.58. The issue has been patched in version 4.6.59. Defenders should verify exposure and remediate vulnerable instances. Evidence is limited to CVE and source-item details; further verification is recommended.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.