{"schema_version":"2","view":"grouped","data":[{"id":3324,"cve_ids":["CVE-2026-77516"],"payload":{"kind":"advisory","title":"MaxKB: Missing per-tool authorization in the agent and workflow tool-dispatch path","summary":"MaxKB is an open-source AI assistant for enterprise. From version 2.0.0 through 2.9.2, a lowest-role workspace member denied access to a tool by WorkspaceUserResourcePermission can still bind its identifier through tool_ids, skill_tool_ids, or mcp_tool_ids and execute it through the agent or workflow dispatch path. The dispatch path does not reapply the per-tool grant enforced by dedicated tool routes, and tool execution decrypts server-side init_params, allowing the caller to receive credentials carried by the denied tool. No fixed version is available as of this review.","evidence":"cve:CVE-2026-77516","products":[{"name":{"value":"MaxKB","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77516","aliases":["CVE-2026-77516"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"1Panel-dev","product":"MaxKB","versions":[{"status":"affected","version":">= 2.0.0, <= 2.9.2"}]}],"modified":"2026-09-28T20:13:03.315Z","provider":"cve","references":["https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-383v-fx78-pphm"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77516","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T20:12:57.747937Z"}}}],"references":[{"url":"https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-383v-fx78-pphm","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T20:13:03.315Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-21T20:40:44.213Z"}}},"related_cves":[{"value":"CVE-2026-77516","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5bdafe91-b188-4368-b071-03eef5e54a8d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77516","advisory_id":"5bdafe91-b188-4368-b071-03eef5e54a8d","event_types":["advisory"],"published_at":"2026-10-24T21:33:44.067454+00:00","technologies":["core-cve","maxkb"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-21T20:40:44.213+00:00","detail_url":"/advisories/advisory%3A5bdafe91-b188-4368-b071-03eef5e54a8d","group":{"id":"advisory:5bdafe91-b188-4368-b071-03eef5e54a8d","revision":1,"primary_event_id":3337,"change":"published","superseded_by":[],"changed":{"id":3337,"cve_ids":["CVE-2026-77516"],"payload":{"kind":"advisory","title":"MaxKB: Missing per-tool authorization in the agent and workflow tool-dispatch path","summary":"MaxKB is an open-source AI assistant for enterprise. From version 2.0.0 through 2.9.2, a lowest-role workspace member denied access to a tool by WorkspaceUserResourcePermission can still bind its identifier through tool_ids, skill_tool_ids, or mcp_tool_ids and execute it through the agent or workflow dispatch path. The dispatch path does not reapply the per-tool grant enforced by dedicated tool routes, and tool execution decrypts server-side init_params, allowing the caller to receive credentials carried by the denied tool. No fixed version is available as of this review.","evidence":"cve:CVE-2026-77516","products":[{"name":{"value":"MaxKB","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77516","aliases":["CVE-2026-77516"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"1Panel-dev","product":"MaxKB","versions":[{"status":"affected","version":">= 2.0.0, <= 2.9.2"}]}],"modified":"2026-09-28T20:13:03.315Z","provider":"cve","references":["https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-383v-fx78-pphm"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77516","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T20:12:57.747937Z"}}}],"references":[{"url":"https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-383v-fx78-pphm","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T20:13:03.315Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-21T20:40:44.213Z"}}},"related_cves":[{"value":"CVE-2026-77516","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5bdafe91-b188-4368-b071-03eef5e54a8d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77516","advisory_id":"5bdafe91-b188-4368-b071-03eef5e54a8d","event_types":["advisory"],"published_at":"2026-10-24T21:33:44.067454+00:00","technologies":["core-cve","maxkb"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-21T20:40:44.213+00:00","detail_url":"/events/3337"},"members":[{"id":3337,"cve_ids":["CVE-2026-77516"],"payload":{"kind":"advisory","title":"MaxKB: Missing per-tool authorization in the agent and workflow tool-dispatch path","summary":"MaxKB is an open-source AI assistant for enterprise. From version 2.0.0 through 2.9.2, a lowest-role workspace member denied access to a tool by WorkspaceUserResourcePermission can still bind its identifier through tool_ids, skill_tool_ids, or mcp_tool_ids and execute it through the agent or workflow dispatch path. The dispatch path does not reapply the per-tool grant enforced by dedicated tool routes, and tool execution decrypts server-side init_params, allowing the caller to receive credentials carried by the denied tool. No fixed version is available as of this review.","evidence":"cve:CVE-2026-77516","products":[{"name":{"value":"MaxKB","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77516","aliases":["CVE-2026-77516"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"1Panel-dev","product":"MaxKB","versions":[{"status":"affected","version":">= 2.0.0, <= 2.9.2"}]}],"modified":"2026-09-28T20:13:03.315Z","provider":"cve","references":["https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-383v-fx78-pphm"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77516","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T20:12:57.747937Z"}}}],"references":[{"url":"https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-383v-fx78-pphm","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T20:13:03.315Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-21T20:40:44.213Z"}}},"related_cves":[{"value":"CVE-2026-77516","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5bdafe91-b188-4368-b071-03eef5e54a8d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77516","advisory_id":"5bdafe91-b188-4368-b071-03eef5e54a8d","event_types":["advisory"],"published_at":"2026-10-24T21:33:44.067454+00:00","technologies":["core-cve","maxkb"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-21T20:40:44.213+00:00","detail_url":"/events/3337"}]}},{"id":1968,"cve_ids":["CVE-2026-79918"],"payload":{"kind":"advisory","title":"MaxKB: Sandbox escape via unhooked fexecve","summary":"MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, the ToolExecutor LD_PRELOAD sandbox hooks execve, execvpe, and execveat to prevent subprocess creation but does not hook fexecve. An authenticated attacker able to execute tool code can call fexecve to start a process outside the sandbox's intended subprocess policy. This issue is fixed in version 2.10.6-lts.","evidence":"cve:CVE-2026-79918","products":[{"name":{"value":"MaxKB","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-79918","aliases":["CVE-2026-79918"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"1Panel-dev","product":"MaxKB","versions":[{"status":"affected","version":"< 2.10.6-lts"}]}],"modified":"2026-09-24T22:46:09.086Z","provider":"cve","references":["https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-9mh9-v949-fwqh","https://github.com/1Panel-dev/MaxKB/commit/6fa7947a85030b87977c4026f33af11ca10dd1e6","https://github.com/1Panel-dev/MaxKB/releases/tag/v2.10.6-lts"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-79918","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T22:45:51.318278Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T22:46:09.086Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-21T20:47:13.575Z"}}},"related_cves":[{"value":"CVE-2026-79918","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:47f12bea-8494-464b-9a97-ac8950df9266","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-79918","advisory_id":"47f12bea-8494-464b-9a97-ac8950df9266","event_types":["advisory"],"published_at":"2026-10-24T21:10:54.372282+00:00","technologies":["core-cve","maxkb"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-21T20:47:13.575+00:00","detail_url":"/advisories/advisory%3A47f12bea-8494-464b-9a97-ac8950df9266","group":{"id":"advisory:47f12bea-8494-464b-9a97-ac8950df9266","revision":1,"primary_event_id":1967,"change":"published","superseded_by":[],"changed":{"id":1967,"cve_ids":["CVE-2026-79918"],"payload":{"kind":"advisory","title":"MaxKB: Sandbox escape via unhooked fexecve","summary":"MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, the ToolExecutor LD_PRELOAD sandbox hooks execve, execvpe, and execveat to prevent subprocess creation but does not hook fexecve. An authenticated attacker able to execute tool code can call fexecve to start a process outside the sandbox's intended subprocess policy. This issue is fixed in version 2.10.6-lts.","evidence":"cve:CVE-2026-79918","products":[{"name":{"value":"MaxKB","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-79918","aliases":["CVE-2026-79918"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"1Panel-dev","product":"MaxKB","versions":[{"status":"affected","version":"< 2.10.6-lts"}]}],"modified":"2026-09-24T22:46:09.086Z","provider":"cve","references":["https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-9mh9-v949-fwqh","https://github.com/1Panel-dev/MaxKB/commit/6fa7947a85030b87977c4026f33af11ca10dd1e6","https://github.com/1Panel-dev/MaxKB/releases/tag/v2.10.6-lts"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-79918","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T22:45:51.318278Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T22:46:09.086Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-21T20:47:13.575Z"}}},"related_cves":[{"value":"CVE-2026-79918","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:47f12bea-8494-464b-9a97-ac8950df9266","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-79918","advisory_id":"47f12bea-8494-464b-9a97-ac8950df9266","event_types":["advisory"],"published_at":"2026-10-24T21:10:54.372282+00:00","technologies":["core-cve","maxkb"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-21T20:47:13.575+00:00","detail_url":"/events/1967"},"members":[{"id":1967,"cve_ids":["CVE-2026-79918"],"payload":{"kind":"advisory","title":"MaxKB: Sandbox escape via unhooked fexecve","summary":"MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, the ToolExecutor LD_PRELOAD sandbox hooks execve, execvpe, and execveat to prevent subprocess creation but does not hook fexecve. An authenticated attacker able to execute tool code can call fexecve to start a process outside the sandbox's intended subprocess policy. This issue is fixed in version 2.10.6-lts.","evidence":"cve:CVE-2026-79918","products":[{"name":{"value":"MaxKB","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-79918","aliases":["CVE-2026-79918"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"1Panel-dev","product":"MaxKB","versions":[{"status":"affected","version":"< 2.10.6-lts"}]}],"modified":"2026-09-24T22:46:09.086Z","provider":"cve","references":["https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-9mh9-v949-fwqh","https://github.com/1Panel-dev/MaxKB/commit/6fa7947a85030b87977c4026f33af11ca10dd1e6","https://github.com/1Panel-dev/MaxKB/releases/tag/v2.10.6-lts"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-79918","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T22:45:51.318278Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T22:46:09.086Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-21T20:47:13.575Z"}}},"related_cves":[{"value":"CVE-2026-79918","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:47f12bea-8494-464b-9a97-ac8950df9266","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-79918","advisory_id":"47f12bea-8494-464b-9a97-ac8950df9266","event_types":["advisory"],"published_at":"2026-10-24T21:10:54.372282+00:00","technologies":["core-cve","maxkb"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-21T20:47:13.575+00:00","detail_url":"/events/1967"}]}},{"id":1967,"cve_ids":["CVE-2026-77525"],"payload":{"kind":"advisory","title":"MaxKB: Management chat-record routes trust path application_id but load ChatRecord by global chat_id","summary":"MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, management chat-record routes authorize the path application_id but load records using global chat_id and chat_record_id values without confirming that the chat belongs to the authorized application. A normal user in the same workspace who knows the chat_id of a persisted non-debug record for a victim's published application can place it under a separate attacker-owned application path to read victim chat records. An attacker with an owned knowledge base and document can also use add_knowledge to copy victim answers while updating the victim record's improve_paragraph_id_list. No fixed version is available as of this review.","evidence":"cve:CVE-2026-77525","products":[{"name":{"value":"MaxKB","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77525","aliases":["CVE-2026-77525"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.2,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"1Panel-dev","product":"MaxKB","versions":[{"status":"affected","version":"<= 2.10.2-lts"}]}],"modified":"2026-09-24T22:43:08.986Z","provider":"cve","references":["https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-7fmh-98f2-2cfg"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77525","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T22:42:40.330696Z"}}}],"references":[{"url":"https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-r6g6-69fh-c39q","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T22:43:08.986Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-21T20:37:49.415Z"}}},"related_cves":[{"value":"CVE-2026-77525","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f9dc3802-6e1c-4553-954f-2496c6ae9bb4","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77525","advisory_id":"f9dc3802-6e1c-4553-954f-2496c6ae9bb4","event_types":["advisory"],"published_at":"2026-10-24T21:10:53.776508+00:00","technologies":["core-cve","maxkb"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-21T20:37:49.415+00:00","detail_url":"/advisories/advisory%3Af9dc3802-6e1c-4553-954f-2496c6ae9bb4","group":{"id":"advisory:f9dc3802-6e1c-4553-954f-2496c6ae9bb4","revision":1,"primary_event_id":1966,"change":"published","superseded_by":[],"changed":{"id":1966,"cve_ids":["CVE-2026-77525"],"payload":{"kind":"advisory","title":"MaxKB: Management chat-record routes trust path application_id but load ChatRecord by global chat_id","summary":"MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, management chat-record routes authorize the path application_id but load records using global chat_id and chat_record_id values without confirming that the chat belongs to the authorized application. A normal user in the same workspace who knows the chat_id of a persisted non-debug record for a victim's published application can place it under a separate attacker-owned application path to read victim chat records. An attacker with an owned knowledge base and document can also use add_knowledge to copy victim answers while updating the victim record's improve_paragraph_id_list. No fixed version is available as of this review.","evidence":"cve:CVE-2026-77525","products":[{"name":{"value":"MaxKB","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77525","aliases":["CVE-2026-77525"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.2,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"1Panel-dev","product":"MaxKB","versions":[{"status":"affected","version":"<= 2.10.2-lts"}]}],"modified":"2026-09-24T22:43:08.986Z","provider":"cve","references":["https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-7fmh-98f2-2cfg"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77525","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T22:42:40.330696Z"}}}],"references":[{"url":"https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-r6g6-69fh-c39q","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T22:43:08.986Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-21T20:37:49.415Z"}}},"related_cves":[{"value":"CVE-2026-77525","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f9dc3802-6e1c-4553-954f-2496c6ae9bb4","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77525","advisory_id":"f9dc3802-6e1c-4553-954f-2496c6ae9bb4","event_types":["advisory"],"published_at":"2026-10-24T21:10:53.776508+00:00","technologies":["core-cve","maxkb"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-21T20:37:49.415+00:00","detail_url":"/events/1966"},"members":[{"id":1966,"cve_ids":["CVE-2026-77525"],"payload":{"kind":"advisory","title":"MaxKB: Management chat-record routes trust path application_id but load ChatRecord by global chat_id","summary":"MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, management chat-record routes authorize the path application_id but load records using global chat_id and chat_record_id values without confirming that the chat belongs to the authorized application. A normal user in the same workspace who knows the chat_id of a persisted non-debug record for a victim's published application can place it under a separate attacker-owned application path to read victim chat records. An attacker with an owned knowledge base and document can also use add_knowledge to copy victim answers while updating the victim record's improve_paragraph_id_list. No fixed version is available as of this review.","evidence":"cve:CVE-2026-77525","products":[{"name":{"value":"MaxKB","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77525","aliases":["CVE-2026-77525"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.2,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"1Panel-dev","product":"MaxKB","versions":[{"status":"affected","version":"<= 2.10.2-lts"}]}],"modified":"2026-09-24T22:43:08.986Z","provider":"cve","references":["https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-7fmh-98f2-2cfg"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77525","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T22:42:40.330696Z"}}}],"references":[{"url":"https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-r6g6-69fh-c39q","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T22:43:08.986Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-21T20:37:49.415Z"}}},"related_cves":[{"value":"CVE-2026-77525","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f9dc3802-6e1c-4553-954f-2496c6ae9bb4","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77525","advisory_id":"f9dc3802-6e1c-4553-954f-2496c6ae9bb4","event_types":["advisory"],"published_at":"2026-10-24T21:10:53.776508+00:00","technologies":["core-cve","maxkb"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-21T20:37:49.415+00:00","detail_url":"/events/1966"}]}},{"id":1966,"cve_ids":["CVE-2026-77522"],"payload":{"kind":"advisory","title":"MaxKB: Authenticated full-read SSRF via the knowledge web-document import/sync crawler (Fork.fork requests.get, no internal-IP guard, non-blind)","summary":"MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the knowledge web-document import and synchronization crawler passes an authenticated workspace user's URL to Fork.fork, which calls requests.get with verify=False and without restricting schemes, loopback, link-local, private, or reserved addresses. The response body is converted into imported document content, allowing a low-privileged user to read cloud metadata or internal HTTP services through the MaxKB server. No fixed version is available as of this review.","evidence":"cve:CVE-2026-77522","products":[{"name":{"value":"MaxKB","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77522","aliases":["CVE-2026-77522"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"1Panel-dev","product":"MaxKB","versions":[{"status":"affected","version":"<= 2.10.3-lts"}]}],"modified":"2026-09-24T22:45:01.746Z","provider":"cve","references":["https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-ffxw-frpx-8rww"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77522","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T22:44:38.531780Z"}}}],"references":[{"url":"https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-ffxw-frpx-8rww","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T22:45:01.746Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-21T20:44:17.597Z"}}},"related_cves":[{"value":"CVE-2026-77522","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a0dba337-a83b-4eea-b536-9fbce276a700","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77522","advisory_id":"a0dba337-a83b-4eea-b536-9fbce276a700","event_types":["advisory"],"published_at":"2026-10-24T21:10:53.205258+00:00","technologies":["core-cve","maxkb"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-21T20:44:17.597+00:00","detail_url":"/advisories/advisory%3Aa0dba337-a83b-4eea-b536-9fbce276a700","group":{"id":"advisory:a0dba337-a83b-4eea-b536-9fbce276a700","revision":1,"primary_event_id":1965,"change":"published","superseded_by":[],"changed":{"id":1965,"cve_ids":["CVE-2026-77522"],"payload":{"kind":"advisory","title":"MaxKB: Authenticated full-read SSRF via the knowledge web-document import/sync crawler (Fork.fork requests.get, no internal-IP guard, non-blind)","summary":"MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the knowledge web-document import and synchronization crawler passes an authenticated workspace user's URL to Fork.fork, which calls requests.get with verify=False and without restricting schemes, loopback, link-local, private, or reserved addresses. The response body is converted into imported document content, allowing a low-privileged user to read cloud metadata or internal HTTP services through the MaxKB server. No fixed version is available as of this review.","evidence":"cve:CVE-2026-77522","products":[{"name":{"value":"MaxKB","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77522","aliases":["CVE-2026-77522"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"1Panel-dev","product":"MaxKB","versions":[{"status":"affected","version":"<= 2.10.3-lts"}]}],"modified":"2026-09-24T22:45:01.746Z","provider":"cve","references":["https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-ffxw-frpx-8rww"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77522","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T22:44:38.531780Z"}}}],"references":[{"url":"https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-ffxw-frpx-8rww","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T22:45:01.746Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-21T20:44:17.597Z"}}},"related_cves":[{"value":"CVE-2026-77522","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a0dba337-a83b-4eea-b536-9fbce276a700","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77522","advisory_id":"a0dba337-a83b-4eea-b536-9fbce276a700","event_types":["advisory"],"published_at":"2026-10-24T21:10:53.205258+00:00","technologies":["core-cve","maxkb"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-21T20:44:17.597+00:00","detail_url":"/events/1965"},"members":[{"id":1965,"cve_ids":["CVE-2026-77522"],"payload":{"kind":"advisory","title":"MaxKB: Authenticated full-read SSRF via the knowledge web-document import/sync crawler (Fork.fork requests.get, no internal-IP guard, non-blind)","summary":"MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the knowledge web-document import and synchronization crawler passes an authenticated workspace user's URL to Fork.fork, which calls requests.get with verify=False and without restricting schemes, loopback, link-local, private, or reserved addresses. The response body is converted into imported document content, allowing a low-privileged user to read cloud metadata or internal HTTP services through the MaxKB server. No fixed version is available as of this review.","evidence":"cve:CVE-2026-77522","products":[{"name":{"value":"MaxKB","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77522","aliases":["CVE-2026-77522"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"1Panel-dev","product":"MaxKB","versions":[{"status":"affected","version":"<= 2.10.3-lts"}]}],"modified":"2026-09-24T22:45:01.746Z","provider":"cve","references":["https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-ffxw-frpx-8rww"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77522","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T22:44:38.531780Z"}}}],"references":[{"url":"https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-ffxw-frpx-8rww","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T22:45:01.746Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-21T20:44:17.597Z"}}},"related_cves":[{"value":"CVE-2026-77522","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a0dba337-a83b-4eea-b536-9fbce276a700","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77522","advisory_id":"a0dba337-a83b-4eea-b536-9fbce276a700","event_types":["advisory"],"published_at":"2026-10-24T21:10:53.205258+00:00","technologies":["core-cve","maxkb"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-21T20:44:17.597+00:00","detail_url":"/events/1965"}]}},{"id":1964,"cve_ids":["CVE-2026-77519"],"payload":{"kind":"advisory","title":"MaxKB: Expired application API keys remain usable on `/chat/api/mcp`","summary":"MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, the /chat/api/mcp authentication path looks up an ApplicationApiKey using only its secret and active status, without enforcing the is_permanent and expire_time checks used by the standard chat API. A previously valid, non-permanent application key that remains active after expiration can initialize the MCP endpoint, list the published application's tool metadata, invoke tools/call, and create durable application_chat and application_chat_record state even though /chat/api/open rejects the same key. No fixed version is available as of this review.","evidence":"cve:CVE-2026-77519","products":[{"name":{"value":"MaxKB","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77519","aliases":["CVE-2026-77519"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"1Panel-dev","product":"MaxKB","versions":[{"status":"affected","version":"<= 2.10.2-lts"}]}],"modified":"2026-09-24T22:42:13.590Z","provider":"cve","references":["https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-r6g6-69fh-c39q"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77519","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T22:41:50.977189Z"}}}],"references":[{"url":"https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-r6g6-69fh-c39q","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T22:42:13.590Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-21T20:26:27.820Z"}}},"related_cves":[{"value":"CVE-2026-77519","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:878ca66a-6bd5-4669-8eed-12a642277c28","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77519","advisory_id":"878ca66a-6bd5-4669-8eed-12a642277c28","event_types":["advisory"],"published_at":"2026-10-24T21:10:52.061094+00:00","technologies":["core-cve","maxkb"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-21T20:26:27.82+00:00","detail_url":"/advisories/advisory%3A878ca66a-6bd5-4669-8eed-12a642277c28","group":{"id":"advisory:878ca66a-6bd5-4669-8eed-12a642277c28","revision":1,"primary_event_id":1963,"change":"published","superseded_by":[],"changed":{"id":1963,"cve_ids":["CVE-2026-77519"],"payload":{"kind":"advisory","title":"MaxKB: Expired application API keys remain usable on `/chat/api/mcp`","summary":"MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, the /chat/api/mcp authentication path looks up an ApplicationApiKey using only its secret and active status, without enforcing the is_permanent and expire_time checks used by the standard chat API. A previously valid, non-permanent application key that remains active after expiration can initialize the MCP endpoint, list the published application's tool metadata, invoke tools/call, and create durable application_chat and application_chat_record state even though /chat/api/open rejects the same key. No fixed version is available as of this review.","evidence":"cve:CVE-2026-77519","products":[{"name":{"value":"MaxKB","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77519","aliases":["CVE-2026-77519"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"1Panel-dev","product":"MaxKB","versions":[{"status":"affected","version":"<= 2.10.2-lts"}]}],"modified":"2026-09-24T22:42:13.590Z","provider":"cve","references":["https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-r6g6-69fh-c39q"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77519","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T22:41:50.977189Z"}}}],"references":[{"url":"https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-r6g6-69fh-c39q","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T22:42:13.590Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-21T20:26:27.820Z"}}},"related_cves":[{"value":"CVE-2026-77519","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:878ca66a-6bd5-4669-8eed-12a642277c28","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77519","advisory_id":"878ca66a-6bd5-4669-8eed-12a642277c28","event_types":["advisory"],"published_at":"2026-10-24T21:10:52.061094+00:00","technologies":["core-cve","maxkb"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-21T20:26:27.82+00:00","detail_url":"/events/1963"},"members":[{"id":1963,"cve_ids":["CVE-2026-77519"],"payload":{"kind":"advisory","title":"MaxKB: Expired application API keys remain usable on `/chat/api/mcp`","summary":"MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, the /chat/api/mcp authentication path looks up an ApplicationApiKey using only its secret and active status, without enforcing the is_permanent and expire_time checks used by the standard chat API. A previously valid, non-permanent application key that remains active after expiration can initialize the MCP endpoint, list the published application's tool metadata, invoke tools/call, and create durable application_chat and application_chat_record state even though /chat/api/open rejects the same key. No fixed version is available as of this review.","evidence":"cve:CVE-2026-77519","products":[{"name":{"value":"MaxKB","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77519","aliases":["CVE-2026-77519"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"1Panel-dev","product":"MaxKB","versions":[{"status":"affected","version":"<= 2.10.2-lts"}]}],"modified":"2026-09-24T22:42:13.590Z","provider":"cve","references":["https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-r6g6-69fh-c39q"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77519","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T22:41:50.977189Z"}}}],"references":[{"url":"https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-r6g6-69fh-c39q","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T22:42:13.590Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-21T20:26:27.820Z"}}},"related_cves":[{"value":"CVE-2026-77519","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:878ca66a-6bd5-4669-8eed-12a642277c28","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77519","advisory_id":"878ca66a-6bd5-4669-8eed-12a642277c28","event_types":["advisory"],"published_at":"2026-10-24T21:10:52.061094+00:00","technologies":["core-cve","maxkb"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-21T20:26:27.82+00:00","detail_url":"/events/1963"}]}}],"next_after":3324,"next_before":1964}