CVE-2026-77523 | 1Panel-dev MaxKB up to 2.10.3-lts ModelParams ModelSerializer.ModelParams model_id improper authorization

September 21, 2026 Yanac

A vulnerability identified as critical has been detected in 1Panel-dev MaxKB up to 2.10.3-lts. This impacts the function ModelSerializer.ModelParams of the component ModelParams. The manipulation of the argument model_id leads to improper authorization.

This vulnerability is listed as CVE-2026-77523. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More