https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 09:53:14 +0000 https://vulnerability.circl.lu/vuln/ghsa-8579-rgg5-ph2m <p><strong>Affected:</strong> PyPI: praisonai</p> <p># DiscordApproval accepts unrelated channel messages as dangerous-tool approvals</p> <p>## Summary</p> <p>`praisonai.bots.DiscordApproval` approves a pending dangerous tool call when it sees any later non-bot message in the configured Discord channel whose text is classified as approval, such as `yes`.</p> <p>The decision is not bound to:</p> <p>- a Discord reply to the approval message; - a Discord thread created for that request; - a Discord interaction/button callback for that request; - an explicit approver user allowlist; or - an approval nonce visible only to intended approvers.</p> <p>As a result, any user who can post in the configured approval channel can approve a pending high-risk tool call by sending `yes` after the approval message appears. The same local PoV also shows that the Slack and Telegram messaging approval backends have no explicit approver allowlist parameter, but the primary report-grade issue is the Discord backend&#39;s unthreaded channel cross-talk: the approving message does not need to be a reply or otherwise request-bound.</p> <p>## Affected Product</p> <p>- Repository: `MervinPraison/PraisonAI` - Ecosystem: `pip` - Package: `praisonai` - Component: Python messaging approval backends - Primary affected file: `src/praisonai/praisonai/bots/_discord_approval.py` - Related sibling files: - `src/praisonai/praisonai/bots/_slack_approval.py` - `src/praisonai/praisonai/bots/_telegram_approval.py` - Latest PyPI version validated: `4.6.58` - Current `origin/main` validated: `1ad58ca02975ff1398…</p> <p><strong>Affected:</strong> PyPI: praisonai</p> <p># DiscordApproval accepts unrelated channel messages as dangerous-tool approvals</p> <p>## Summary</p> <p>`praisonai.bots.DiscordApproval` approves a pending dangerous tool call when it sees any later non-bot message in the configured Discord channel whose text is classified as approval, such as `yes`.</p> <p>The decision is not bound to:</p> <p>- a Discord reply to the approval message; - a Discord thread created for that request; - a Discord interaction/button callback for that request; - an explicit approver user allowlist; or - an approval nonce visible only to intended approvers.</p> <p>As a result, any user who can post in the configured approval channel can approve a pending high-risk tool call by sending `yes` after the approval message appears. The same local PoV also shows that the Slack and Telegram messaging approval backends have no explicit approver allowlist parameter, but the primary report-grade issue is the Discord backend&#39;s unthreaded channel cross-talk: the approving message does not need to be a reply or otherwise request-bound.</p> <p>## Affected Product</p> <p>- Repository: `MervinPraison/PraisonAI` - Ecosystem: `pip` - Package: `praisonai` - Component: Python messaging approval backends - Primary affected file: `src/praisonai/praisonai/bots/_discord_approval.py` - Related sibling files: - `src/praisonai/praisonai/bots/_slack_approval.py` - `src/praisonai/praisonai/bots/_telegram_approval.py` - Latest PyPI version validated: `4.6.58` - Current `origin/main` validated: `1ad58ca02975ff1398…</p> https://vulnerability.circl.lu/vuln/ghsa-8579-rgg5-ph2m https://vulnerability.circl.lu/vuln/pysec-2026-3506 <p><strong>Affected:</strong> PyPI: praisonai</p> <p># DiscordApproval accepts unrelated channel messages as dangerous-tool approvals</p> <p>## Summary</p> <p>`praisonai.bots.DiscordApproval` approves a pending dangerous tool call when it sees any later non-bot message in the configured Discord channel whose text is classified as approval, such as `yes`.</p> <p>The decision is not bound to:</p> <p>- a Discord reply to the approval message; - a Discord thread created for that request; - a Discord interaction/button callback for that request; - an explicit approver user allowlist; or - an approval nonce visible only to intended approvers.</p> <p>As a result, any user who can post in the configured approval channel can approve a pending high-risk tool call by sending `yes` after the approval message appears. The same local PoV also shows that the Slack and Telegram messaging approval backends have no explicit approver allowlist parameter, but the primary report-grade issue is the Discord backend&#39;s unthreaded channel cross-talk: the approving message does not need to be a reply or otherwise request-bound.</p> <p>## Affected Product</p> <p>- Repository: `MervinPraison/PraisonAI` - Ecosystem: `pip` - Package: `praisonai` - Component: Python messaging approval backends - Primary affected file: `src/praisonai/praisonai/bots/_discord_approval.py` - Related sibling files: - `src/praisonai/praisonai/bots/_slack_approval.py` - `src/praisonai/praisonai/bots/_telegram_approval.py` - Latest PyPI version validated: `4.6.58` - Current `origin/main` validated: `1ad58ca02975ff1398…</p> <p><strong>Affected:</strong> PyPI: praisonai</p> <p># DiscordApproval accepts unrelated channel messages as dangerous-tool approvals</p> <p>## Summary</p> <p>`praisonai.bots.DiscordApproval` approves a pending dangerous tool call when it sees any later non-bot message in the configured Discord channel whose text is classified as approval, such as `yes`.</p> <p>The decision is not bound to:</p> <p>- a Discord reply to the approval message; - a Discord thread created for that request; - a Discord interaction/button callback for that request; - an explicit approver user allowlist; or - an approval nonce visible only to intended approvers.</p> <p>As a result, any user who can post in the configured approval channel can approve a pending high-risk tool call by sending `yes` after the approval message appears. The same local PoV also shows that the Slack and Telegram messaging approval backends have no explicit approver allowlist parameter, but the primary report-grade issue is the Discord backend&#39;s unthreaded channel cross-talk: the approving message does not need to be a reply or otherwise request-bound.</p> <p>## Affected Product</p> <p>- Repository: `MervinPraison/PraisonAI` - Ecosystem: `pip` - Package: `praisonai` - Component: Python messaging approval backends - Primary affected file: `src/praisonai/praisonai/bots/_discord_approval.py` - Related sibling files: - `src/praisonai/praisonai/bots/_slack_approval.py` - `src/praisonai/praisonai/bots/_telegram_approval.py` - Latest PyPI version validated: `4.6.58` - Current `origin/main` validated: `1ad58ca02975ff1398…</p> https://vulnerability.circl.lu/vuln/pysec-2026-3506