Vulnerability · Published Jul 30, 2026 · Assigned by GitHub_M
CVE-2026-64870MaxKB: UpdateStoreTool fetches caller-supplied app-store URLs without host validation
Medium 5.3
In plain English
A medium-severity server-side request forgery in MaxKB from 1Panel-dev. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).
Official description
MaxKB is an open-source AI assistant for enterprise. In versions 2.0.0 through 2.10.4-lts, UpdateStoreTool.update_tool passes caller-supplied download_url and download_callback_url values to requests.get without equivalent trusted-host and redirect validation, allowing an authenticated workspace user to make the server request internal, loopback, link-local, or cloud metadata URLs. A fix is present on the v2 branch but has not yet been included in a published release.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| 1Panel-dev | MaxKB | >= 2.0.0, <= 2.10.4-lts |
Weakness: CWE-918 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N