CVE-2026-77525

Deferred Deferred - Pending Action

Unauthorized Chat Record Access in MaxKB

Publication date: 2026-09-21

Last updated on: 2026-09-21

Assigner: GitHub, Inc.

Description

MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, management chat-record routes authorize the path application_id but load records using global chat_id and chat_record_id values without confirming that the chat belongs to the authorized application. A normal user in the same workspace who knows the chat_id of a persisted non-debug record for a victim's published application can place it under a separate attacker-owned application path to read victim chat records. An attacker with an owned knowledge base and document can also use add_knowledge to copy victim answers while updating the victim record's improve_paragraph_id_list. No fixed version is available as of this review.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-21

Last Modified

2026-09-21

Generated

2026-09-22

AI Q&A

2026-09-22

EPSS Evaluated

N/A

NVD

CVE-2026-77525

Affected Vendors & Products

Vendor	Product	Version / Range
maxkb	maxkb	to 2.10.2-lts (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

MaxKB versions 2.10.2-lts and earlier have a flaw in managing chat records. The system authorizes access based on an application ID but loads records using global chat and record IDs without verifying if the chat belongs to the authorized application. This allows unauthorized users to access chat records by manipulating IDs.

Detection Guidance

This vulnerability involves unauthorized access to chat records in MaxKB due to improper authorization checks. To detect it, review application and chat record mappings in MaxKB logs for mismatches between application_id and chat_id. Check for unusual access patterns or requests to load records under unauthorized applications. No specific commands are provided in the context.

Impact Analysis

An attacker within the same workspace could read sensitive chat records of a victim's published application by exploiting the ID manipulation. This could lead to data leaks, unauthorized access to conversations, or misuse of proprietary information.

Compliance Impact

This vulnerability could result in unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations using MaxKB may face compliance violations and legal consequences.

Mitigation Strategies

Upgrade to a patched version of MaxKB if available. If no fixed version exists, restrict access to chat records and application paths to authorized users only. Monitor for unauthorized access to chat records or knowledge base modifications.

Hi! I’m here to help you understand CVE-2026-77525. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70