CVE-2026-77525

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.2-lts

Description Management chat-record routes authorize the path application id but load records using global chat id and chat record id values without verifying if the chat belongs to the authorized application. This allows a user within the same workspace who knows the chat id of a persisted non-debug record from a victim's published application to access those records by placing them under an application path they own. Additionally, an attacker with their own knowledge base and document can use the add knowledge function to copy victim answers while updating the improve paragraph id list of the victim's record.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.