CyberRota Analysis
AI-GeneratedMaxKB versions prior to 2.10.0-lts are vulnerable due to inadequate validation of MCP transport types, enabling authenticated users to import malicious .tool files that can execute arbitrary system commands via the AI Chat node. This vulnerability poses a significant risk as it allows for potential system compromise and unauthorized command execution. Organizations utilizing MaxKB should prioritize upgrading to the latest version to mitigate this high-severity threat.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import functionality in apps/tools/serializers/tool.py and MCP referencing mode in apps/application/chat_pipeline/step/chat_step/impl/base_chat_step.py do not consistently validate MCP transport type, allowing an authenticated user to import a .tool file containing stdio transport with malicious commands and trigger the configuration through an AI Chat node so MultiServerMCPClient executes arbitrary system commands. This issue is fixed in version 2.10.0-lts.