CVE-2026-77518

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.2-lts

Description A normal workspace user can retrieve hidden tools by knowing another user's active tool id within the same workspace. This occurs because the tool-detail route does not implement the per-resource authorization found in the list route. The resulting response includes Tool.code, which may expose MCP server configurations and headers. Additionally, an attacker can insert a foreign mcp tool id into a workflow mcp-node within a workflow they own, allowing the workflow debug process to utilize the original owner's MCP configuration without proper permission verification.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.