CVE-2026-77521

MaxKB is an open-source enterprise AI assistant. Prior to 2.10.5-lts , assistants with a tool, MCP tool, skill, or sub-application use SandboxShellBackend , which exposes an execute shell tool without excluding it and omits execute from interrupt_on, meaning no human approval is required before e...

CVE-2026-94424

CVE-2026-94424 affects the Moore Threads MTT S80 Driver Package up to version 340.150 . The vulnerable component is the function sub_140001000 in the kernel-mode library mtdispkm64.sys , specifically within the IOCTL Handler , where a heap-based buffer overflow can be triggered through manipulati...

CVE-2026-77522

MaxKB (open-source enterprise AI assistant by 1Panel-dev) versions 2.10.3-lts and earlier are affected by an authenticated full-read SSRF in the knowledge web-document import/sync crawler. The underlying cause is that Fork.fork invokes requests.get with verify=False and no restrictions on schemes...

CVE-2026-79917

MaxKB , an open-source enterprise AI assistant, has a missing ownership check in versions 2.7.0 through 2.10.4-lts on the endpoint POST /chat/api/{application_id}/chat/{chat_id}/share_chat. The endpoint verifies that a conversation exists but does not verify that it belongs to the authenticated c...

CVE-2026-77516

MaxKB (open-source enterprise AI assistant) versions 2.0.0 through 2.9.2 are affected by a missing per-tool authorization check in the agent and workflow tool-dispatch path . A lowest-role workspace member who has been denied access to a tool via WorkspaceUserResourcePermission can still bind tha...

CVE-2026-77523

MaxKB (an open-source enterprise AI assistant) is vulnerable to a cross-workspace model parameter form write in versions 2.10.3-lts and earlier . The root cause lies in the model parameter form route, which authorizes the path workspace, but ModelSerializer.ModelParams loads and saves a Model by ...

CVE-2026-77525

MaxKB , an open-source enterprise AI assistant, contains an authorization flaw in its management chat-record routes (affects 2.10.2-lts and earlier ). The routes authorize based on the path application_id but load ChatRecord objects using global chat_id and chat_record_id values without verifying...

CVE-2026-77518

MaxKB (open-source enterprise AI assistant) versions 2.10.2-lts and earlier are affected by an authorization bypass in the MCP tool-detail route, which fails to apply the per-resource authorization check used by the list route. A workspace user who knows another user's active MCP tool_id can retr...

CVE-2026-79916

MaxKB is an open-source enterprise AI assistant. Prior to 2.10.5-lts , authenticated workspace members can inject control characters into the AWS Bedrock access_key_id and secret_access_key fields. The _update_aws_credentials function writes these values to /root/.aws/credentials without safe par...

CVE-2026-58272

Sync-in Server (open-source file storage and collaboration platform) prior to 2.4.1 exposes a timing side-channel on the POST /api/auth/login endpoint. The root cause is that authentication attempts for nonexistent accounts skip the bcrypt comparison performed for existing accounts, producing a m...

CVE-2026-58270

Sync-in Server , an open-source platform for file storage, sharing, and syncing, is vulnerable to a ReDoS (Regular Expression Denial of Service) in the sync diff pathFilters parameter prior to version 2.4.0 . The endpoint compiles a user-supplied string directly into a RegExp without complexity v...

CVE-2026-77520

MaxKB (open-source enterprise AI assistant) in versions 2.10.2-lts and earlier has an authorization flaw in the homepage application question-ranking endpoint. A normal user in the same workspace can extract another user's application_id when the victim's published application has ranking activit...

CVE-2026-77519

MaxKB (an open-source enterprise AI assistant) versions 2.10.2-lts and earlier contain an authentication inconsistency in the /chat/api/mcp endpoint. The MCP authentication path validates ApplicationApiKey using only the secret and active status, omitting the is_permanent and expire_time checks e...

CVE-2026-73511

Envoy (open source edge and service proxy) contains a path-matching/authentication bypass in versions prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1 . The root cause is a mismatch in how per-segment matrix parameters (semicolon-delimited) are handled: Envoy matches the raw request path, while servl...

CVE-2026-73553

CVE-2026-73553 affects Envoy , the open-source edge and service proxy for cloud-native applications. When the route option ignore_path_parameters_in_path_matching is enabled, Envoy's router strips semicolon suffixes before route matching, but the RBAC url_path matcher evaluates the raw path. This...

CVE-2026-73551

Envoy is an open-source edge and service proxy for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1 , its URL normalization does not recognize dot and dotdot path segments carrying semicolon parameters . A request such as /user/..;foo=bar/admin is not canonicalized to /admi...

CVE-2026-94572

In OpenStack Octavia before 18.0.1 , the Amphora provider driver failed to validate the tls_ciphers field on listener and pool objects for control characters. The unvalidated value is written verbatim into the HAProxy configuration generated on the amphora, allowing an authenticated project membe...

CVE-2026-93433

A stack buffer overflow in libstoragemgmt's _sg_parse_vpd_80() function allows a local or virtual storage device controlled by an attacker to supply malformed SCSI VPD page 0x80 data with an untrusted page length field. This can crash or destabilize the process querying the serial number, resulti...

CVE-2026-94571

OpenStack Octavia versions before 18.0.1 are affected when using the Amphora provider driver . The root cause is that the RFC 3986 URL validator percent-encodes control characters before structural validation, allowing newlines to pass checks, yet Octavia writes the raw unencoded value directly i...

CVE-2026-58269

Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0 , the POST /api/auth/token endpoint authenticates users with only username and password, then calls getTokens(), which returns full access and refresh JWTs without checking whet...