CVE-2026-77516 Details
Description
MaxKB is an open-source AI assistant for enterprise. From version 2.0.0 through 2.9.2, a lowest-role workspace member denied access to a tool by WorkspaceUserResourcePermission can still bind its identifier through tool_ids, skill_tool_ids, or mcp_tool_ids and execute it through the agent or workflow dispatch path. The dispatch path does not reapply the per-tool grant enforced by dedicated tool routes, and tool execution decrypts server-side init_params, allowing the caller to receive credentials carried by the denied tool. No fixed version is available as of this review.
A vulnerability in MaxKB, an open-source AI assistant for enterprise, allows low-role workspace members to execute tools they are denied access to and retrieve sensitive credentials. This issue affects MaxKB versions 2.0.0 through 2.9.2. The vulnerability arises because the agent and workflow dispatch paths do not enforce the per-tool authorization model, which is applied in dedicated tool routes. As a result, denied tools can be bound and executed through workflows, exposing decrypted server-side initialization parameters that include sensitive credentials.
To address this vulnerability, apply the per-tool authorization used by the tool routes on the agent and workflow paths. Validate every bound tool against the caller's granted tools and make the 'filter_authorized_ids' function consult the per-tool grant.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 21, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-383v-fx78-pphm | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-639 | Authorization Bypass Through User-Controlled Key | [email protected] |
| CWE-862 | Missing Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| 1Panel-dev MaxKB | >= 2.0.0, <= 2.9.2 (semver) |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 21, 2026 | New CVE Received | [email protected] |