Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Critical MaxKB AI Agent Flaw Lets Prompt Injection Execute Commands as Root
Excerpt
A critical vulnerability in MaxKB, tracked as CVE-2026-77521, could allow attackers to use prompt injection to trigger arbitrary shell commands through AI assistants configured with tools, MCP integrations, skills, or sub-applications. The flaw affects MaxKB versions up to and including 2.10.3-lts and has been fixed in version 2.10.5-lts. The issue carries a CVSS v3.1 score of 10.0, with network-based exploitation requiring no authentication or user interaction. Researchers…
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-77521 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…