TI-2026-30640 Aliases CVE-2026-42336

MaxKB: SSRF Bypass via DNS Rebinding in MaxKB OSS URL Fetch

LOW 23CWE-367Published 2026-05-26 · Updated 2026-05-27

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: High
Attack requirements: None
Impact type: —
Confidentiality · integrity · availability: None · None · None
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

MaxKB is an open-source AI assistant for enterprise. MaxKB 2.8.0 and prior are vulnerable to a server-side request forgery (SSRF) bypass in the OSS file service URL fetch functionality due to inconsistent DNS resolution between validation and actual request execution, allowing attackers to access internal network services. This vulnerability is fixed in 2.8.1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00203 10th percentileScored 2026-11-07

Fix Fixed MaxKB (1Panel-dev): 2.8.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
1Panel-dev	MaxKB	before 2.8.1	2.8.1	Patch available	CNA

MaxKB Vendor1Panel-dev Affected before 2.8.1 Fixed in 2.8.1 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPE	Versions	Role	Vendor
cpe:2.3:a:maxkb:maxkb::::::::	—	—	Maxkb

cpe:2.3:a:maxkb:maxkb:*:*:*:*:*:*:*:* Versions — — ·Maxkb

Remediation

Fix · CNA MaxKB (1Panel-dev) Fixed in 2.8.1

Timeline

2026-10-02 Threatist record created from CVE-2026-42336

References

Other 1

https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-6m4p-9wwc-4q5q

TI-2023-08712 KubePi's Hardcoded Jwtsigkeys allows malicious actor to login with a forged JWT token CVSS 3.1CRITICAL 9.8
TI-2023-08729 KubeOperator is vulnerable to unauthorized access to system API CVSS 3.1CRITICAL 9.8
TI-2026-54047 MaxKB: Prompt-injectable agent can lead to command execution CVSS 3.1CRITICAL 10.0
TI-2025-43180 CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface… CVSS 3.1CRITICAL 9.8
TI-2024-27040 Arbitrary File Read in Ansible Playbooks in Jumpserver CVSS 3.1CRITICAL 10.0
TI-2024-26801 a sqlinjection in 1Panel CVSS 3.1CRITICAL 9.8

See all 145 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences