CVE-2026-64870: MaxKB: UpdateStoreTool fetches caller-supplied app-store URLs without host validation
MaxKB is an open-source AI assistant for enterprise. In versions 2.0.0 through 2.10.4-lts, UpdateStoreTool.updatetool passes caller-supplied downloadurl and downloadcallbackurl values to requests.get without equivalent trusted-host and redirect validation, allowing an authenticated workspace user to make the server request internal, loopback, link-local, or cloud metadata URLs. A fix is present on the v2 branch but has not yet been included in a published release.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Until the fix is included in a published release, prevent authenticated workspace users from supplying arbitrary download_url and download_callback_url by enforcing allowlisted destination domains/URLs at the application layer (block internal, loopback, link-local, and cloud metadata URL targets).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64870?
The severity of CVE-2026-64870 is rated at 56.
How do I fix CVE-2026-64870?
To fix CVE-2026-64870, ensure that the UpdateStoreTool validates the host and redirects of the supplied URLs.
What type of vulnerability is CVE-2026-64870?
CVE-2026-64870 is classified as a Server-Side Request Forgery (SSRF) vulnerability.
Which versions of MaxKB are affected by CVE-2026-64870?
Versions 2.0.0 through 2.10.4-lts of MaxKB are affected by CVE-2026-64870.
What do the caller-supplied values in CVE-2026-64870 affect?
The caller-supplied download_url and download_callback_url values in CVE-2026-64870 can lead to unvalidated requests being made by UpdateStoreTool.