CVE-2026-77520

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.2-lts

Description A normal user within the same workspace can obtain another user's application id via the homepage application question-ranking endpoint. This occurs if the victim's published application has ranking activity within the selected date range and the attacker knows or guesses the application name, bypassing restrictions on application detail and debug-open routes. Furthermore, an attacker capable of creating and publishing a workflow application can use the disclosed identifier within an attacker-owned workflow application-node. By triggering this workflow, the attacker can receive output from the victim application and create application chat and application chat record rows under the victim application, as the save and runtime paths fail to verify permissions for the referenced application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.