Executive brief
MaxKB is an open-source AI assistant platform for enterprise use. A security vulnerability in the workflow template import feature allows logged-in users to force the server to make requests to internal network addresses. This could allow an attacker to scan private internal networks or access sensitive cloud metadata that is not intended to be public.
Technical details
A Server-Side Request Forgery (SSRF) vulnerability exists in MaxKB's workflow template import functionality within `apps/application/serializers/application.py`. The application accepts a user-provided `downloadUrl` and fetches it using the Python `requests` library without performing URL validation or filtering for private IP ranges (RFC1918, link-local, or cloud metadata endpoints). An authenticated attacker can exploit this to perform internal network reconnaissance or access sensitive local services. The vulnerability is resolved in version 2.9.1 by implementing proper URL validation and IP blacklisting.
Affected products
- 1Panel-dev MaxKB < 2.9.1
Timeline
- 2026-05-14: advisory: GitHub Security Advisory published
- 2026-05-26: disclosed: CVE published to NVD