CyberRota Analysis
AI-GeneratedMaxKB versions 2.0.0 through 2.10.4-lts are vulnerable due to insufficient validation of user-supplied URLs in the UpdateStoreTool.update_tool function, potentially allowing authenticated users to access internal or sensitive server resources. This could lead to unauthorized data exposure or manipulation within the enterprise environment. Organizations using affected versions should prioritize applying the fix from the v2 branch to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MaxKB is an open-source AI assistant for enterprise. In versions 2.0.0 through 2.10.4-lts, UpdateStoreTool.update_tool passes caller-supplied download_url and download_callback_url values to requests.get without equivalent trusted-host and redirect validation, allowing an authenticated workspace user to make the server request internal, loopback, link-local, or cloud metadata URLs. A fix is present on the v2 branch but has not yet been included in a published release.