{"id":"CVE-2026-77522","published":"2026-09-21T21:17:11.120","lastModified":"2026-09-21T21:17:11.243","description":"MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the knowledge web-document import and synchronization crawler passes an authenticated workspace user's URL to Fork.fork, which calls requests.get with verify=False and without restricting schemes, loopback, link-local, private, or reserved addresses. The response body is converted into imported document content, allowing a low-privileged user to read cloud metadata or internal HTTP services through the MaxKB server. No fixed version is available as of this review.","cvssScore":4.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cwes":["CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-ffxw-frpx-8rww","tags":[]}],"exploitRefs":[{"url":"https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-ffxw-frpx-8rww","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows a low-privileged user to read cloud metadata or internal HTTP services by importing documents through MaxKB's document import feature due to insecure requests.get calls with verify=False. This matters because it can lead to unauthorized data exposure.","exploitability":"Exploitation requires access to the authenticated workspace and knowledge of the URL format, making it moderately difficult but feasible for attackers in controlled environments.","blast_radius":"If exploited, this could result in significant data breaches affecting internal services and cloud metadata visibility within the organization.","remediation":"Update MaxKB to a version that restricts schemes, disables loopback, link-local, private, or reserved address access, and ensures secure HTTPS requests.","tags":["auth-bypass","web","metadata-exposure","insecure-requests"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-22T06:33:59.485Z"}}