Maxkb

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Maxkb records in CISA KEV

No Maxkb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Maxkb 20 records HIGH

Records

20 records

TI-2025-33793 CVE-2025-53928

MaxKB has RCE in MCP call

HIGH 76

MaxKB is an open-source AI assistant for enterprise.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00502 Published 2025-07-17 Fixed in 2.0.0, 1.10.9-lts CWE-94

TI-2024-37130 CVE-2024-56137

MaxKB RCE vulnerability in function library

HIGH 67

MaxKB, which stands for Max Knowledge Base, is an open source knowledge base question-answering system based on a large language model and retrieval-augmented generation (RAG).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00808 Published 2025-01-02 Fixed in 1.9.0 CWE-78

TI-2025-23462 CVE-2025-32383

MaxKB has a reverse shell vulnerability in function library

HIGH 65

MaxKB (Max Knowledge Base) is an open source knowledge base question-answering system based on a large language model and retrieval-augmented generation (RAG).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00292 Published 2025-04-10 Fixed in 1.10.4-lts CWE-94

TI-2026-28404 CVE-2026-39422

MaxKB has Stored XSS via ChatHeadersMiddleware

MEDIUM 64

MaxKB is an open-source AI assistant for enterprise.

CVSS 4.0MEDIUM 6.9 Network Low privileges User interaction EPSS 0.00216 Published 2026-04-14 Fixed in 2.8.0 CWE-79

TI-2025-33792 CVE-2025-53927

MaxKB sandbox bypass

MEDIUM 63

MaxKB is an open-source AI assistant for enterprise.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00268 Published 2025-07-17 Fixed in 2.0.0 CWE-94

TI-2025-31088 CVE-2025-48950

MaxKB Python Sandbox Bypass in Function Library

MEDIUM 59

MaxKB is an open-source AI assistant for enterprise.

CVSS 4.0MEDIUM 5.8 Network Low privileges No interaction EPSS 0.0048 Published 2025-06-03 Fixed in 1.10.8-lts CWE-276

TI-2025-04061 CVE-2025-4546 · GHSA-7f8g-5r7m-gwx4

1Panel-dev MaxKB Knowledge Base Module csv injection

MEDIUM 56

A vulnerability was found in 1Panel-dev MaxKB up to 1.10.7.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00711 Published 2025-05-11 No fix listed CWE-1236

TI-2025-40855 CVE-2025-66419

MaxKB vulnerable to privilege escalation through sandbox bypass

MEDIUM 43

MaxKB is an open-source AI assistant for enterprise.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0031 Published 2025-12-11 Fixed in 2.4.0 CWE-362

TI-2025-40878 CVE-2025-66446

MaxKB has a Python sandbox LD_PRELOAD bypass

MEDIUM 40

MaxKB is an open-source AI assistant for enterprise.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00349 Published 2025-12-11 Fixed in 2.4.0 CWE-362

TI-2025-39902 CVE-2025-64511

MaxKB has SSRF in sandbox

LOW 37

MaxKB is an open-source AI assistant for enterprise.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00219 Published 2025-11-13 Fixed in 2.3.1 CWE-918

TI-2026-28402 CVE-2026-39420

MaxKB: Sandbox escape via LD_PRELOAD bypass

LOW 33

MaxKB is an open-source AI assistant for enterprise.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00485 Published 2026-04-14 Fixed in 2.8.0 CWE-693

TI-2026-28403 CVE-2026-39421

MaxKB: Sandbox escape via ctypes and unhooked SYS_pkey_mprotect

LOW 32

MaxKB is an open-source AI assistant for enterprise.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00264 Published 2026-04-14 Fixed in 2.8.0 CWE-693

TI-2026-28400 CVE-2026-39418

MaxKB: SSRF via sandbox network hook bypass

LOW 32

MaxKB is an open-source AI assistant for enterprise.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00198 Published 2026-04-14 Fixed in 2.8.0 CWE-918

TI-2026-28405 CVE-2026-39423

Stored XSS via Eval Injection in EchartsRander Component

LOW 30

MaxKB is an open-source AI assistant for enterprise.

CVSS 4.0MEDIUM 6.9 Network Low privileges User interaction EPSS 0.00173 Published 2026-04-14 Fixed in 2.8.0 CWE-79

TI-2025-40049 CVE-2025-64703

MaxKB has Information Leak in sandbox

LOW 28

MaxKB is an open-source AI assistant for enterprise.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00211 Published 2025-11-13 Fixed in 2.3.1 CWE-200

TI-2026-28406 CVE-2026-39424

MaxKB has CSV Injection in its Application Chat Export Functionality

LOW 24

MaxKB is an open-source AI assistant for enterprise.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00368 Published 2026-04-14 Fixed in 2.8.0 CWE-1236

TI-2026-28399 CVE-2026-39417

MaxKB: RCE via MCP stdio command injection in workflow engine

LOW 24

MaxKB is an open-source AI assistant for enterprise.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00243 Published 2026-04-14 Fixed in 2.8.0 CWE-20

TI-2026-28408 CVE-2026-39426

MaxKB: Stored XSS via Unsanitized iframe_render Parsing

LOW 23

MaxKB is an open-source AI assistant for enterprise.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00193 Published 2026-04-14 Fixed in 2.8.0 CWE-79

TI-2026-28407 CVE-2026-39425

MaxKB: Stored XSS via Unsanitized html_rander Tags in Markdown Rendering

LOW 22

MaxKB is an open-source AI assistant for enterprise.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0018 Published 2026-04-14 Fixed in 2.8.0 CWE-80

TI-2026-28401 CVE-2026-39419

MaxKB: Sandbox Result Validation Bypass via Tool Output Spoofing

LOW 15

MaxKB is an open-source AI assistant for enterprise.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00222 Published 2026-04-14 Fixed in 2.8.0 CWE-290

Open these records in search →