Medium severity · published May 26, 2026
CVE-2026-42337
MaxKB: Broken Access Control in MaxKB OSS URL Fetch API
5.3
CVSS
0.2%
EPSS
No
On KEV
Description
MaxKB is an open-source AI assistant for enterprise. MaxKB 2.8.0 and prior are vulnerable to a broken access control vulnerability in the OSS file service URL fetch API (chat/api/oss/get_url). The endpoint uses application_id from the URL path without validating ownership, allowing attackers to perform operations under other applications’ policies. This vulnerability is fixed in 2.8.1.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
MaxKB · 1Panel-dev
< 2.8.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-42337
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-42337
github.com
https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-2jmj-gwvg-3gp2
More from MaxKB
10.0
CVE-2026-77521
MaxKB: Prompt-injectable agent can lead to command execution
10.0
CVE-2025-66419
MaxKB vulnerable to privilege escalation through sandbox bypass
9.8
CVE-2025-53928
MaxKB has RCE in MCP call
9.1
CVE-2026-79916
MaxKB AWS Bedrock model credential injection leads to remote code execution
8.8
CVE-2026-54149
MaxKB MCP tool import validation bypass allows post-authentication remote code execution