CVE-2026-77523: MaxKB: Cross-workspace model parameter form write
MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the model parameter form route authorizes the path workspace but ModelSerializer.ModelParams loads and saves a Model by id alone without including workspaceid in the query. An authenticated user with model read permission in an attacker-controlled workspace can supply a known victim modelid to read or overwrite the victim's modelparamsform in another workspace, potentially altering workflows that use those defaults. No fixed version is available as of this review.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated user needs model read permission in a workspace they control and a known model ID belonging to a victim workspace. The vulnerable route authorizes the attacker-controlled workspace path but does not scope the model lookup to that workspace.
What can an attacker do with a victim model ID?
They can read or overwrite the victim model's model_params_form across workspace boundaries. This can alter workflows that rely on those model parameter defaults.
Is a fixed version available?
No fixed version was available as of the review. The affected range includes version 2.10.3-lts and earlier.