CVE-2026-77517: MaxKB cross-knowledge IDOR lets a normal user read and modify documents and paragraphs in another knowledge base
MaxKB is an open-source AI assistant for enterprise. From version 2.0.0 through 2.10.2-lts, document and paragraph operate routes authorize only knowledgeid in the request path, then query the target Document by documentid or Paragraph by paragraphid without confirming that the object belongs to that knowledge base. A normal workspace user with a known victim document or paragraph UUID can use an attacker-owned knowledge-base path to read or modify content in another user's knowledge base. No fixed version is available as of this review.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A normal workspace user can exploit it; administrative privileges are not required. The attacker must know a victim document or paragraph UUID.
Are all affected deployments exposed by default?
The issue affects document and paragraph routes in MaxKB versions 2.0.0 through 2.10.2-lts because authorization checks the knowledge base ID in the request path but does not verify the target object's ownership. Exposure requires an attacker to be able to submit requests as a workspace user and possess a target UUID.
What can an attacker do with a target UUID?
An attacker can use a knowledge-base path they control to read or modify documents and paragraphs belonging to another user's knowledge base. The stated impact is limited to confidentiality and integrity; no availability impact is described.
Is a fix available?
No fixed version was available at the time of review. Organizations using affected versions should treat cross-knowledge-base document and paragraph access as unsafe until a vendor fix is available.