Skip to content
Heist/ feed
Back to feed
High

MaxKB: Webhook Trigger Authentication Bypass

Type: advisorySources: OSV

MaxKB is an open-source AI assistant for enterprise. Prior to 2.9.0, MaxKB's webhook trigger endpoint (/api/trigger/v1/webhook/{trigger_id}) is accessible without authentication. The WebhookAuth class unconditionally returns (None, {}), which Django REST Framework interprets as successful authentication. Combined with optional per-trigger token verification and no backend enforcement of token requirements, any unauthenticated attacker who knows a valid trigger ID can invoke webhook triggers to execute their bound tasks. This vulnerability is fixed in 2.9.0.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2026-44847
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 01:13 UTC · Revision 1

Source evidence

MaxKB: Webhook Trigger Authentication Bypass

core-osv · Original source

Published 26 May 2026, 20:16 UTC

MaxKB is an open-source AI assistant for enterprise. Prior to 2.9.0, MaxKB's webhook trigger endpoint (/api/trigger/v1/webhook/{trigger_id}) is accessible without authentication. The WebhookAuth class unconditionally returns (None, {}), which Django REST Framework interprets as successful authentication. Combined with optional per-trigger token verification and no backend enforcement of token requirements, any unauthenticated attacker who knows a valid trigger ID can invoke webhook triggers to execute their bound tasks. This vulnerability is fixed in 2.9.0.

osv:CVE-2026-44847
Complete source record
{
  "id": "75fd4c96ba715b98263a7ec19c9601beb457ab6b7fba3cd3908ceaf2b19f6014",
  "url": "https://osv.dev/vulnerability/CVE-2026-44847",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "MaxKB: Webhook Trigger Authentication Bypass",
    "summary": "MaxKB is an open-source AI assistant for enterprise. Prior to 2.9.0, MaxKB's webhook trigger endpoint (/api/trigger/v1/webhook/{trigger_id}) is accessible without authentication. The WebhookAuth class unconditionally returns (None, {}), which Django REST Framework interprets as successful authentication. Combined with optional per-trigger token verification and no backend enforcement of token requirements, any unauthenticated attacker who knows a valid trigger ID can invoke webhook triggers to execute their bound tasks. This vulnerability is fixed in 2.9.0.",
    "evidence": "osv:CVE-2026-44847",
    "products": [],
    "severity": "high",
    "structured": {
      "id": "CVE-2026-44847",
      "aliases": [
        "CVE-2026-44847",
        "GHSA-r3j3-j58q-rjpp"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/1panel-dev/maxkb",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "e0fe160afb4ff524d4122b90fbad948669f755f7"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "2.9.0"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StringRangeExpression"
                  },
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "2.9.0"
                      }
                    ],
                    "source": "DESCRIPTION"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v2.8.1",
            "v2.8.0",
            "v2.7.0",
            "v2.6.1",
            "v2.6.0",
            "v2.5.0",
            "v2.4.0",
            "v2.3.0",
            "v2.2.0",
            "v2.1.0",
            "v2.0.2",
            "v2.0.1",
            "v2.0.0",
            "v1.10.4-lts",
            "v1.10.3-lts",
            "v1.10.2-lts",
            "v1.10.1-lts",
            "v1.10.0-lts",
            "v1.9.0",
            "v1.7.0",
            "v1.6.1",
            "v1.6.0",
            "v1.5.0",
            "v1.4.0",
            "v1.3.0",
            "v1.2.1",
            "v1.2.0",
            "v1.1.3",
            "v1.1.2",
            "v1.1.1",
            "v1.1.0",
            "v1.0.1",
            "v1.0.0",
            "v0.9.1",
            "v0.9.0"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-44847.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:24.743254401Z",
      "provider": "osv",
      "references": [
        "https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-r3j3-j58q-rjpp",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44847.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-44847",
        "https://github.com/1Panel-dev/MaxKB/issues/5213"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-287",
          "CWE-306"
        ],
        "cna_assigner": "GitHub_M",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44847.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-44847",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 491490,
  "published_at": "2026-05-26T20:16:46.794+00:00"
}