CVE-2026-54149 Details
Description
MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import functionality in apps/tools/serializers/tool.py and MCP referencing mode in apps/application/chat_pipeline/step/chat_step/impl/base_chat_step.py do not consistently validate MCP transport type, allowing an authenticated user to import a .tool file containing stdio transport with malicious commands and trigger the configuration through an AI Chat node so MultiServerMCPClient executes arbitrary system commands. This issue is fixed in version 2.10.0-lts.
A remote code execution vulnerability has been identified in MaxKB, an open-source AI assistant for enterprise, prior to version 2.10.0-lts. The issue arises from the tool import functionality, which fails to properly validate the MCP transport type when importing '.tool' files. This flaw allows an authenticated user to import a file containing a 'stdio' transport with malicious commands. Once imported, the malicious tool is activated through an AI Chat node, exploiting a reference mode that also neglects transport validation. The resulting configuration is processed by 'MultiServerMCPClient', which executes arbitrary system commands, leading to full server compromise.
Users are advised to update MaxKB to version 2.10.0-lts, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 10, 2026CISA-ADP
Assessed Jul 10, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-4pr3-9xhm-98x5 | CISA-ADP | AdvisoryExploitRemedyTechnical AnalysisVendor |
| https://github.com/1Panel-dev/MaxKB/releases/tag/v2.10.0-lts | [email protected] | Release NotesVendor |
| https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-4pr3-9xhm-98x5 | [email protected] | AdvisoryExploitRemedyTechnical AnalysisVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| 1Panel-dev MaxKB | <= 2.10.0-lts (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 10, 2026 | CVE Modified | CISA-ADP |
| Jul 10, 2026 | New CVE Received | [email protected] |