CVE-2026-79916Patch

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.5-lts, authenticated workspace members can inject control characters into AWS Bedrock access_key_id and secret_access_key fields that _update_aws_credentials writes to /root/.aws/credentials without safe parsing. An attacker can append a new AWS profile containing credential_process, then select that profile during a later model-validation request so botocore executes an attacker-controlled command as root. This vulnerability is fixed in 2.10.5-lts.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 3 signals
Disclosure: 1 classified signal
Peaked 2d ago at 1 mentions (2026-09-22); latest day: 1
3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Patch

266.7%

Disclosure

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-22	1	Patch1
2026-09-24	1	Disclosure1
2026-10-16	1	Patch1

Full discourse3 posts

VulnTracker@vuln_tracker46d
Patch
One AI assistant, two separate paths to root (CVSS 10.0 and 9.1). CVE-2026-77521: MaxKB's tool and MCP agents expose a shell-execute function without human approval, so untrusted chat content alone can trigger command execution. CVE-2026-79916: A workspace member can inject control characters into AWS Bedrock credential fields, planting a malicious profile that runs an attacker's command as root. Both fixed in MaxKB 2.10.5-lts. Update now. Details: http://vulntracker.io/cves/CVE-2026-77521 #MaxKB #CVE #AI #PromptInjection #InfoSec #CyberSecurity
Post summary
The text discloses two MaxKB vulnerabilities enabling root compromise and states that both are fixed in MaxKB 2.10.5-lts, urging users to update.
10030177
832 followersView on X
Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters22d
Patch
CVE-2026-79916: MaxKB Bedrock credential injection lets authenticated users plant credential_process in /root/.aws/credentials, executed as root. CVSS 9.1 RCE. Patch still under review. Restrict workspace access now. https://www.valtersit.com/cve/CVE-2026-79916 #CVE #infosec #MaxKB #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker
Post summary
The text discloses CVE-2026-79916 as a credential injection RCE in MaxKB (CVSS 9.1), recommends restricting workspace access as an immediate workaround, and notes the official patch is still under review.
0000046
1.1K followersView on X
Cybersecurity News DE@cybsecuritynews44d
Disclosure
#schwachstellen MaxKB: Kritische Lücken erlauben Remote-Code-Ausführung bis Root vor Version 2.10.5-lts #awsbedrock #cve202677521 #cve202679916 #maxkb https://cybersecurity-news.de/maxkb-kritische-schwachstellen-cve-2026-77521-cve-2026-79916
Post summary
The tweet discloses critical MaxKB vulnerabilities (CVE‑2026‑77521, CVE‑2026‑79916) that enable remote code execution as root in versions before 2.10.5‑lts, providing technical details but no PoC, exploit, or explicit patch guidance.
0000029
15 followersView on X

Explore more

Back to dashboard