CVE-2026-77516: MaxKB is an open-source AI assistant for enterprise. From version 2.0.0 through 2.9.2, a lowest-role workspace member de

MaxKB, an open-source AI assistant for businesses, has a security flaw in versions 2.0.0 through 2.9.2 where users with low permissions can bypass access controls and execute tools they shouldn't have access to by using special identifiers, then receive sensitive credentials that the tool stored on the server.