Executive brief
MaxKB is an open-source AI assistant used by enterprises to manage knowledge bases and chat interactions. A vulnerability allows an attacker with a workspace account to read another user's chat records and copy answers by exploiting improper authorization checks in the chat management API. The attacker can access victim chat data through their own application path without the victim's knowledge or consent, potentially exposing sensitive conversation histories.
Technical details
The management chat-record routes in MaxKB authenticate based on the path application_id but load ChatRecord objects using globally-scoped chat_id and chat_record_id without verifying ownership. An authenticated workspace user can supply an attacker-owned application_id in the URL path while providing a known victim's chat_id to bypass authorization. The add_knowledge endpoint exhibits the same flaw, allowing attackers to import victim chat content into their own knowledge base.
Affected products
- 1Panel-dev MaxKB 2.10.2-lts and earlier
Timeline
- 2026-09-02: disclosed
- 2026-09-21: advisory: CVE-2026-77525 published