CVE-2026-77521

Published: Set 21, 2026 Last Modified: Set 22, 2026
ExploitDB:
Other exploit source:
Google Dorks:
CRITICAL 10,0
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: changed
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.5-lts, assistants with a tool, MCP tool, skill, or sub-application use SandboxShellBackend, which exposes an execute shell tool without excluding it and omits execute from interrupt_on, so human approval is not required. Untrusted chat or ingested content can therefore cause command execution; source deployments with MAXKB_SANDBOX disabled run commands directly as the application user, while the official root container's string-based gosu wrapper allowed shell metacharacters to execute outside the intended sandbox. This issue is fixed in version 2.10.5-lts.

78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Stable
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Integrity Availability Non-Repudiation
Potential Impacts:
Execute Unauthorized Code Or Commands Dos: Crash, Exit, Or Restart Read Files Or Directories Modify Files Or Directories Read Application Data Modify Application Data Hide Activities
Applicable Platforms
Technologies: Not Technology-Specific, AI/ML, Web Server
Likelihood of Exploit: High
View CWE Details
250

Execution with Unnecessary Privileges

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Integrity Availability Access Control
Potential Impacts:
Gain Privileges Or Assume Identity Execute Unauthorized Code Or Commands Read Application Data Dos: Crash, Exit, Or Restart
Applicable Platforms
Technologies: AI/ML, Mobile
Likelihood of Exploit: Medium
View CWE Details
749

Exposed Dangerous Method or Function

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Confidentiality Availability Access Control Other
Potential Impacts:
Gain Privileges Or Assume Identity Read Application Data Modify Application Data Execute Unauthorized Code Or Commands Other
Applicable Platforms
All platforms may be affected
Likelihood of Exploit: Low
View CWE Details
https://github.com/1Panel-dev/MaxKB/security/advisories/GHS…
https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-f36j-f34j-h3rx
https://github.com/1Panel-dev/MaxKB/commit/594f50f2ea80a502…
https://github.com/1Panel-dev/MaxKB/commit/594f50f2ea80a502d1c955371ba0438b277c…
https://github.com/1Panel-dev/MaxKB/releases/tag/v2.10.5-lts
https://github.com/1Panel-dev/MaxKB/releases/tag/v2.10.5-lts
https://github.com/1Panel-dev/MaxKB/security/advisories/GHS…
https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-f36j-f34j-h3rx