Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.1

MaxKB allows credential injection leading to code execution

CVE-2026-79916 · published 28 days ago
Summary

In MaxKB versions before 2.10.5‑lts, a signed‑in workspace user can place special characters into the fields used for AWS Bedrock credentials. These characters are written directly to the system's AWS credentials file, letting the attacker add a profile that runs any command as the root user. Updating MaxKB to version 2.10.5‑lts removes this risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
1panel-dev maxkb < 2.10.5-lts
Original advisory text
MaxKB AWS Bedrock model credential injection leads to remote code execution
MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.5-lts, authenticated workspace members can inject control characters into AWS Bedrock access_key_id and secret_access_key fields that _update_aws_credentials writes to /root/.aws/credentials without safe parsing. An attacker can append a new AWS profile containing credential_process, then select that profile during a later model-validation request so botocore executes an attacker-controlled command as root. This vulnerability is fixed in 2.10.5-lts.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
9.1 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-78OS Command Injection
Timeline
Published21 Sep 2026
Updated19 Oct 2026
First seen21 Sep 2026
Sources
CVE-2026-79916 · NVD
CVE-2026-79916 · MITRE
CVE-2026-79916 · OSV
GHSA-2324-7xjr-9qxg · GHSA
Track software like this
Free during beta