CVE-2026-77525 Details

A vulnerability exists in MaxKB versions through 2.10.2-lts, where management chat-record routes improperly authorize the application_id path. The routes load chat records using global chat_id and chat_record_id values without verifying if the chat belongs to the authorized application. This flaw allows a user to access chat records of another application by routing through an attacker-owned application_id, provided they know the chat_id of a non-debug record from a victim's published application. Additionally, an attacker can exploit this vulnerability to copy victim responses into their own knowledge base while altering the metadata of the victim's chat record.

MaxKB should implement validation in all management chat-record routes to ensure that the loaded chat belongs to the authorized application_id. Additionally, the add_knowledge route should verify each chat_id against the authorized application before importing records.