The vulnerability allows an authenticated user who has model read permission in an attacker‑controlled workspace to send requests to the model parameter form route with a victim’s model ID. Because the underlying serializer loads and saves the Model record by its identifier alone, ignoring the workspace_id column, the request can read or overwrite the victim’s model_params_form in another workspace. This enables silent alteration of default workflow parameters, potentially causing incorrect behavior or unexpected outputs for users relying on those defaults, and compromises the integrity of deployed workflows.

All installations of 1Panel‑dev MaxKB version 2.10.3‑lts and earlier are affected. No fixed version has been released at the time of this review.

The CVSS score of 7.4 indicates a moderate‑to‑high severity. The EPSS score is not available, so the exact likelihood of exploitation is uncertain, but the flaw is exploitable by any authenticated user possessing model read access within a workspace they control. The attack requires only legitimate authentication; an attacker can craft a request to the vulnerable endpoint supplying a victim model ID to read or overwrite that model’s parameters in a different workspace. The flaw is not currently listed in the CISA KEV catalog, but the potential for internal misuse warrants immediate mitigation.