In MaxKB version 2.10.2-lts and earlier, the application question‑ranking endpoint discloses a victim’s application_id to any user in the same workspace who knows or can guess the application name and the ranking period. This missing authorization flaw (CWE-862) allows the attacker to create a workflow application that includes a node referencing the victim’s application, trigger the workflow, and obtain output produced by the victim. The workflow execution also writes new rows into the victim’s application_chat and application_chat_record tables because the save and runtime paths do not verify the caller’s permissions, leading to unauthorized data access and persistence.

The affected software is the 1Panel‑dev MaxKB product, specifically all releases up to and including 2.10.2‑lts. No fixed release has been issued at the time of this advisory.

The vulnerability carries a CVSS score of 5.4, indicating moderate severity. No EPSS score is available, and it is not listed in the CISA KEV catalog. Exploitation requires only a normal user account within the same workspace, clever use of the ranking endpoint, and the ability to create a workflow application. The attacker does not need elevated privileges beyond those of a workspace member, making the attack path relatively straightforward for an insider or compromised user.