CVE-2026-77523

Deferred Deferred - Pending Action

MaxKB Path Traversal Vulnerability in Model Parameters

Publication date: 2026-09-21

Last updated on: 2026-09-21

Assigner: GitHub, Inc.

Description

MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the model parameter form route authorizes the path workspace but ModelSerializer.ModelParams loads and saves a Model by id alone without including workspace_id in the query. An authenticated user with model read permission in an attacker-controlled workspace can supply a known victim model_id to read or overwrite the victim's model_params_form in another workspace, potentially altering workflows that use those defaults. No fixed version is available as of this review.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-21

Last Modified

2026-09-21

Generated

2026-09-22

AI Q&A

2026-09-22

EPSS Evaluated

N/A

NVD

CVE-2026-77523

Affected Vendors & Products

Vendor	Product	Version / Range
maxkb	maxkb	2.10.3-lts

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

MaxKB versions 2.10.3-lts and earlier have a flaw where the model parameter form route allows unauthorized access. The ModelSerializer.ModelParams loads and saves a Model by ID without checking the workspace_id, enabling authenticated users with model read permissions in a controlled workspace to read or overwrite another user's model parameters in a different workspace by supplying a known model ID.

Detection Guidance

This vulnerability requires checking for unauthorized access to model parameters across workspaces. Inspect logs for requests to the model parameter form route with mismatched workspace IDs. Look for users accessing models outside their assigned workspace. No specific commands are provided in the context.

Impact Analysis

An attacker with access to a workspace could alter your model parameters, potentially changing workflows that rely on those defaults. This could lead to incorrect AI responses, data leaks, or workflow disruptions if the model parameters are modified maliciously.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, potentially violating GDPR's data integrity and confidentiality requirements or HIPAA's safeguards for protected health information. Organizations using MaxKB may face compliance risks if exploited.

Mitigation Strategies

Upgrade to a patched version of MaxKB if available. If no fixed version exists, restrict workspace access and model permissions to trusted users only. Monitor model configurations for unauthorized changes and review workflows using default model parameters.

Hi! I’m here to help you understand CVE-2026-77523. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70