# CVE-2026-77517: MaxKB authorization bypass in document and paragraph routes

Source: https://junglewise.ai/threats/cve-2026-77517-maxkb-is-an-open-source-ai-assistant-for-enterprise-from-version  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-21. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-77517 · Severity: medium · CVSS 5.4 · Published 2026-09-21

MaxKB is an open-source AI assistant platform used by enterprises to manage knowledge bases. A flaw in access controls allows a legitimate workspace user to read and modify documents and paragraphs in other users' knowledge bases within the same workspace by bypassing authorization checks. This permits unauthorized access to sensitive documents and the ability to tamper with another user's content.

Technologies: [1Panel-dev MaxKB](https://junglewise.ai/threats/technologies/maxkb). Vendors: [1Panel-dev](https://junglewise.ai/threats/vendors/1panel-dev).

## Quick answers

**Is CVE-2026-77517 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-77517 being exploited in the wild.

**How severe is CVE-2026-77517?** Medium severity, with a CVSS score of 5.4, published 21 September 2026.

**Which products and versions are affected?** 1Panel-dev MaxKB 2.0.0 through 2.10.2-lts.

**Is there a fix for CVE-2026-77517?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-77517 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-77517?** Check whether you run 1Panel-dev MaxKB at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an insecure direct object reference (IDOR) where document and paragraph operate handlers validate only the knowledge_id in the URL path but fail to verify that the target document or paragraph object actually belongs to that knowledge base. An attacker with a valid user token can construct requests using their own knowledge base ID in the path while supplying another user's document or paragraph UUID in the request, bypassing the authorization gate. The fix requires binding the document and paragraph IDs to the knowledge_id in the authorization check, similar to the pattern already correctly implemented in the batch document and create paragraph endpoints.

## Affected products

- 1Panel-dev MaxKB 2.0.0 through 2.10.2-lts

## Timeline

- 2026-09-21: disclosed

## References

- [https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-58cm-c5jq-96vf](https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-58cm-c5jq-96vf)

## Related threats

- [MaxKB chat-record routes authorization bypass in management API](https://junglewise.ai/threats/cve-2026-77525-maxkb-is-an-open-source-ai-assistant-for-enterprise-in-2-10-2-lts)
- [MaxKB cross-workspace model parameter form write](https://junglewise.ai/threats/cve-2026-77523-maxkb-is-an-open-source-ai-assistant-for-enterprise-in-version-2)
- [MaxKB knowledge web-document crawler server-side request forgery](https://junglewise.ai/threats/cve-2026-77522-maxkb-is-an-open-source-ai-assistant-for-enterprise-in-version-2)
- [MaxKB command execution in SandboxShellBackend](https://junglewise.ai/threats/cve-2026-77521-maxkb-is-an-open-source-ai-assistant-for-enterprise-prior-to)
- [MaxKB authorization bypass in application discovery and invocation](https://junglewise.ai/threats/cve-2026-77520-maxkb-is-an-open-source-ai-assistant-for-enterprise-in-2-10-2-lts)