| शीर्षक | 1Panel-dev MaxKB <= v2.6.1 Remote Code Execution |
|---|
| विवरण | MaxKB is vulnerable to Remote Code Execution (RCE) due to improper validation placement in its Model Context Protocol (MCP) node implementation. Although the application implements a whitelist to restrict MCP transport types to safe values ('sse' and 'streamable_http'), this validation is only enforced on the tool-listing API endpoint. It is bypassed entirely during workflow application saving and execution. An authenticated user can inject arbitrary transport configurations (such as stdio with OS commands) via the application edit endpoint. When the workflow is subsequently triggered, the unsanitized configuration is passed directly to the MultiServerMCPClient, resulting in arbitrary shell command execution on the host server.
|
|---|
| स्रोत | ⚠️ https://github.com/AnalogyC0de/public_exp/issues/30 |
|---|
| उपयोगकर्ता | Ana10gy (UID 93358) |
|---|
| सबमिशन | 18/03/2026 01:49 PM (7 महीनों पहले) |
|---|
| संयम | 11/04/2026 09:35 AM (24 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 356968 [1Panel-dev MaxKB तक 2.6.1 Model Context Protocol Node base_mcp_node.py execute अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|