CVE-2026-77521

CriticalCVSS 10.0/10Last modified Sep 22, 2026

Description

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.5-lts, assistants with a tool, MCP tool, skill, or sub-application use SandboxShellBackend, which exposes an execute shell tool without excluding it and omits execute from interrupt_on, so human approval is not required. Untrusted chat or ingested content can therefore cause command execution; source deployments with MAXKB_SANDBOX disabled run commands directly as the application user, while the official root container's string-based gosu wrapper allowed shell metacharacters to execute outside the intended sandbox. This issue is fixed in version 2.10.5-lts.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-78 CWE-250 CWE-749

Affected software

No affected versions have been published.

Timeline

Published: Sep 21, 2026
Last modified: Sep 22, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-775224.3MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the knowledge web-document import and synchronizatio CVE-2026-775237.4MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the model parameter form route authorizes the path w CVE-2026-775249.9KEDA is a Kubernetes-based Event Driven Autoscaling component. In version 2.20.2 and earlier, a namespace administrator who can create Trigg CVE-2026-775254.2MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, management chat-record routes authorize the path application CVE-2026-775285.3Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. Prior to 26.7.1, WebSocket endpoints th CVE-2026-77536.5The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing capability check on CVE-2026-775328.8A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwi CVE-2026-775339.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Prot CVE-2026-775349.9A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devi CVE-2026-775359.1A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Net CVE-2026-775369.9A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devi CVE-2026-7753710.0A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to