CyberRota Analysis
AI-GeneratedAuthenticated members of MaxKB versions prior to 2.10.5-lts are vulnerable to command injection through improperly parsed AWS credentials, allowing attackers to execute arbitrary commands with root privileges. This critical vulnerability poses a significant risk to organizations using MaxKB, particularly those leveraging AWS services, as it can lead to unauthorized access and manipulation of cloud resources. Enterprises utilizing this open-source AI assistant should prioritize upgrading to the patched version to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.5-lts, authenticated workspace members can inject control characters into AWS Bedrock access_key_id and secret_access_key fields that _update_aws_credentials writes to /root/.aws/credentials without safe parsing. An attacker can append a new AWS profile containing credential_process, then select that profile during a later model-validation request so botocore executes an attacker-controlled command as root. This vulnerability is fixed in 2.10.5-lts.