{"id":"CVE-2026-77523","published":"2026-09-21T21:17:11.280","lastModified":"2026-09-21T21:17:11.423","description":"MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the model parameter form route authorizes the path workspace but ModelSerializer.ModelParams loads and saves a Model by id alone without including workspace_id in the query. An authenticated user with model read permission in an attacker-controlled workspace can supply a known victim model_id to read or overwrite the victim's model_params_form in another workspace, potentially altering workflows that use those defaults. No fixed version is available as of this review.","cvssScore":7.4,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cwes":["CWE-639"],"vendors":[],"products":[],"references":[{"url":"https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-g888-8cvh-9284","tags":[]}],"exploitRefs":[{"url":"https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-g888-8cvh-9284","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows an authenticated user to read or overwrite another user's model parameters in MaxKB AI assistant, potentially altering default settings. This matters because it can lead to unauthorized changes affecting workflows.","exploitability":"Exploitation requires authentication and model read permission within a specific workspace; moderate effort needed.","blast_radius":"If exploited, the impact could be significant as it affects multiple workspaces and their associated models, potentially disrupting enterprise operations.","remediation":"Restrict model parameter access to include workspace_id in queries to prevent unauthorized reads or overwrites.","tags":["auth-bypass","web","ai","enterprise"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-22T06:16:00.301Z"}}