CVE-2026-77523

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.3-lts

Description An issue exists in the model parameter form route where the system authorizes the workspace path but the ModelSerializer.ModelParams function loads and saves a model using only the id without including the workspace id in the query. This allows an authenticated user with model read permissions in one workspace to provide a known model id from another workspace to read or overwrite the model params form of a victim, which could lead to the alteration of workflows relying on those defaults.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.