This vulnerability allows a normal workspace user to access and modify content in another user's knowledge base. The flaw exists because the API routes for documents and paragraphs authorize only the knowledge_id from the request path, then fetch the target object by its UUID without verifying ownership. As a result, a user who knows a victim document or paragraph identifier can read or alter content in a different knowledge base, leading to confidentiality and integrity violations.

Affected product: MaxKB (open‑source AI assistant) from vendor 1Panel-dev. Versions 2.0.0 through 2.10.2‑lts are impacted. No patch version has been released as of the latest review.

The CVSS score of 5.4 indicates moderate severity. EPSS is not available, and the vulnerability is not listed in CISA KEV. The attack requires a user to be authenticated as a normal workspace member and to know a victim document or paragraph identifier. The likely attack vector is a direct API call within the compromised environment, exploiting the IDOR by specifying an attacker‑controlled knowledge_id. Operators should be aware that cross‑knowledge data leakage or unauthorized modifications could occur.