# CVE-2026-77525: MaxKB chat-record routes authorization bypass in management API

Source: https://junglewise.ai/threats/cve-2026-77525-maxkb-is-an-open-source-ai-assistant-for-enterprise-in-2-10-2-lts  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-21. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-77525 · Severity: medium · CVSS 4.2 · Published 2026-09-21

MaxKB is an open-source AI assistant used by enterprises to manage knowledge bases and chat interactions. A vulnerability allows an attacker with a workspace account to read another user's chat records and copy answers by exploiting improper authorization checks in the chat management API. The attacker can access victim chat data through their own application path without the victim's knowledge or consent, potentially exposing sensitive conversation histories.

Technologies: [1Panel-dev MaxKB](https://junglewise.ai/threats/technologies/maxkb). Vendors: [1Panel-dev](https://junglewise.ai/threats/vendors/1panel-dev).

## Quick answers

**Is CVE-2026-77525 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-77525 being exploited in the wild.

**How severe is CVE-2026-77525?** Medium severity, with a CVSS score of 4.2, published 21 September 2026.

**Which products and versions are affected?** 1Panel-dev MaxKB 2.10.2-lts and earlier.

**Is there a fix for CVE-2026-77525?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-77525 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-77525?** Check whether you run 1Panel-dev MaxKB at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The management chat-record routes in MaxKB authenticate based on the path application_id but load ChatRecord objects using globally-scoped chat_id and chat_record_id without verifying ownership. An authenticated workspace user can supply an attacker-owned application_id in the URL path while providing a known victim's chat_id to bypass authorization. The add_knowledge endpoint exhibits the same flaw, allowing attackers to import victim chat content into their own knowledge base.

## Affected products

- 1Panel-dev MaxKB 2.10.2-lts and earlier

## Timeline

- 2026-09-02: disclosed
- 2026-09-21: advisory: CVE-2026-77525 published

## References

- [https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-7fmh-98f2-2cfg](https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-7fmh-98f2-2cfg)
- [https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-r6g6-69fh-c39q](https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-r6g6-69fh-c39q)

## Related threats

- [MaxKB cross-workspace model parameter form write](https://junglewise.ai/threats/cve-2026-77523-maxkb-is-an-open-source-ai-assistant-for-enterprise-in-version-2)
- [MaxKB knowledge web-document crawler server-side request forgery](https://junglewise.ai/threats/cve-2026-77522-maxkb-is-an-open-source-ai-assistant-for-enterprise-in-version-2)
- [MaxKB command execution in SandboxShellBackend](https://junglewise.ai/threats/cve-2026-77521-maxkb-is-an-open-source-ai-assistant-for-enterprise-prior-to)
- [MaxKB authorization bypass in application discovery and invocation](https://junglewise.ai/threats/cve-2026-77520-maxkb-is-an-open-source-ai-assistant-for-enterprise-in-2-10-2-lts)
- [MaxKB expired application API keys remain usable on MCP endpoint](https://junglewise.ai/threats/cve-2026-77519-maxkb-is-an-open-source-ai-assistant-for-enterprise-in-2-10-2-lts)