Is CVE-2026-39417 actively exploited?

No active exploitation of CVE-2026-39417 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-39417 be exploited remotely?

Yes. CVE-2026-39417 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-39417?

CVE-2026-39417 has a CVSS score of 5.5 (MEDIUM).

HOME VULNERABILITIESCVE-2026-39417

MEDIUM

CVE-2026-39417

CWE-20Published: April 14, 2026· Updated: Apr 20, 2026

5.5

CVSS v3.1

EPSS:0.06%probability of exploitation in 30 daysPercentile:18.6th

Official Description

MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an incomplete fix for CVE-2025-53928, where a Remote Code Execution vulnerability still exists in the MCP node of the workflow engine. MaxKB only restricts the referencing code path (loading MCP config from the database). The else branch, responsible for loading mcp_servers directly from user-supplied JSON remains completely unpatched. Since mcp_source is an optional field (required=False), an attacker can simply omit it or set it to any non-referencing value to bypass the fix. By calling the workflow creation API directly with a crafted JSON payload, an attacker can inject a complete MCP node configuration with stdio transport, arbitrary command, and args — achieving RCE when the workflow is triggered via chat. This issue has been fixed in version 2.8.0.

NVD Source

Technical Analysis

CVE-2026-39417 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.