PT-2026-32564 · Maxkb · Maxkb

Jackieya · Published 2026-04-14 · Updated 2026-04-14 · CVE-2026-39417

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.8.0

Description A Remote Code Execution issue exists in the MCP node of the workflow engine. The system fails to properly validate user-supplied JSON when loading mcp servers, as the fix for a previous issue only restricted the referencing code path. Because the mcp source variable is optional, an attacker can bypass existing restrictions by omitting it or providing a non-referencing value. By sending a crafted JSON payload to the workflow creation API, an attacker can inject an MCP node configuration using stdio transport with arbitrary commands and arguments, leading to code execution when the workflow is triggered via chat.

Recommendations Update to version 2.8.0.

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-20

CWE-78

Related Identifiers

CVE-2026-39417

Affected Products

Maxkb

References · 7

• https://github.com/1Panel-dev/MaxKB/commit/50e96002ee5dca34c68d3d9333b64ea358c92304 · Patch
• https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-pw52-326g-r5xj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-39417 · Security Note
• https://github.com/1Panel-dev/MaxKB/releases/tag/v2.8.0 · Note
• https://twitter.com/CVEnew/status/2043976172510331339 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2044013742162157950 · Twitter Post
• https://twitter.com/CVEarity/status/2044067729783828870 · Twitter Post