CVE-2026-77522
4.3 MEDIUMpublic exploit availablePublished 2026-09-21 · Updated 2026-09-24
AI risk analysis
- Summary
- The flaw allows a low-privileged user to read cloud metadata or internal HTTP services by importing documents through MaxKB's document import feature due to insecure requests.get calls with verify=False. This matters because it can lead to unauthorized data exposure.
- Exploitability
- Exploitation requires access to the authenticated workspace and knowledge of the URL format, making it moderately difficult but feasible for attackers in controlled environments.
- Blast radius
- If exploited, this could result in significant data breaches affecting internal services and cloud metadata visibility within the organization.
- Prioritized remediation
- Update MaxKB to a version that restricts schemes, disables loopback, link-local, private, or reserved address access, and ensures secure HTTPS requests.
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the knowledge web-document import and synchronization crawler passes an authenticated workspace user's URL to Fork.fork, which calls requests.get with verify=False and without restricting schemes, loopback, link-local, private, or reserved addresses. The response body is converted into imported document content, allowing a low-privileged user to read cloud metadata or internal HTTP services through the MaxKB server. No fixed version is available as of this review.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-918
Public exploit & PoC references
References
Data: NVD (public domain). Analysis: local $0 model. Defensive use only.