← Back to search

CVE-2026-77525

4.2 MEDIUMpublic exploit available

Published 2026-09-21 · Updated 2026-09-21

AI risk analysis

Summary
The flaw allows a normal user to read victim chat records by misusing application_id and chat_id values, posing a risk to data privacy within the same workspace.
Exploitability
Exploitation requires knowledge of specific chat_ids and involves reassigning them to different applications; moderately difficult with preconditions.
Blast radius
If exploited, it could lead to significant data exposure for victims within the same workspace, impacting multiple users' privacy.
Prioritized remediation
Implement strict validation checks on application_id and chat_id values to ensure they match before loading records.
data-exposuremisconfigurationworkspace-privacy

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, management chat-record routes authorize the path application_id but load records using global chat_id and chat_record_id values without confirming that the chat belongs to the authorized application. A normal user in the same workspace who knows the chat_id of a persisted non-debug record for a victim's published application can place it under a separate attacker-owned application path to read victim chat records. An attacker with an owned knowledge base and document can also use add_knowledge to copy victim answers while updating the victim record's improve_paragraph_id_list. No fixed version is available as of this review.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Weaknesses

CWE-862

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.