{"vulnerability": "cve-2026-77521", "sightings": [{"uuid": "8982e781-bc36-4823-b26c-124742ed8900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77521", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw2ncb2mqy2p", "content": "CVE-2026-77521 - maxkb\nThe MaxKB AI assistant lets users send prompts that can trigger the system to execute operating\u2011system commands without needing approval. This could allow an attacker to run unwanted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#maxkb #1paneldev #CVE #infosec", "creation_timestamp": "2026-09-21T21:20:07.594977Z"}, {"uuid": "428a3435-741a-43c3-9ff0-90220efe5bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77521", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw2pwzmp2j2g", "content": "\ud83d\udea8 CVE-2026-77521 \u2014 CVSS 10 CRITICAL\n\nMaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.5-lts, assistants with a tool, M...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77521\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-21T22:07:31.879678Z"}, {"uuid": "25af4333-8ba5-4b8d-92d7-2f84247ead3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77521", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mw4flulsbe2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-77521: MaxKB is an open-source AI assistant for enterprise\nCVSS 10\nhttps://beta.vulnsea.com/cve/CVE-2026-77521\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-22T14:07:40.207302Z"}, {"uuid": "8ca01156-b92f-48f9-b402-821511de9488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77521", "type": "seen", "source": "https://t.me/pphm_HackerNews/3255", "content": "\ud83d\udd34 Critical MaxKB AI Agent Flaw Lets Prompt Injection Execute System Commands\n\nA critical vulnerability in the MaxKB AI knowledge-base platform could let attackers exploit prompt injection and run operating system commands on vulnerable deployments, including directly on the underlying host in some configurations.\n\nThis flaw, tracked as CVE-2026-77521 and GHSA-f36j-f34j-h3rx, affects MaxKB versions up to and including 2.10.3-lts. The issue has received a maximum CVSS v3.1 score of 10.0 for public or embedded assistants that can be accessed without authentication. The patch for this vulnerability is included in MaxKB version 2.10.5-lts.", "creation_timestamp": "2026-09-22T18:09:01.000000Z"}]}