CVE-2026-77516

Name of the Vulnerable Software and Affected Versions MaxKB versions 2.0.0 through 2.9.2

Description A workspace member with the lowest role who has been denied access to a tool via WorkspaceUserResourcePermission can still bind the tool identifier using tool ids, skill tool ids, or mcp tool ids. This allows the user to execute the tool through the agent or workflow dispatch path because this path fails to reapply the per-tool grant enforced by dedicated tool routes. During execution, the system decrypts server-side init params, which may allow the unauthorized caller to obtain credentials associated with the denied tool.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.