Unvalidated URLs supplied during workflow template import allow a server‑side request to be made to arbitrary destinations. The resulting activity can access internal network resources, potentially revealing sensitive data or enabling further attacks. The weakness is categorized as CWE‑918.

The vulnerability affects the open‑source AI assistant MaxKB from 1Panel‑dev. Versions before 2.9.1 are susceptible; all releases 2.9.1 and later contain the fix.

The CVSS score of 6.3 indicates a moderate severity. Although the EPSS score is not listed, the vulnerability is not present in the CISA KEV catalog. The attack requires authenticated access to create or import workflow templates, but the impact remains substantial because arbitrary URLs can target internal hosts. No public exploit is documented, yet the lack of input validation makes exploitation straightforward for users with permission to import templates.