Browse CVEs

MEDIUM 5.4 CVE-2026-39425 MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability that allows a… Maxkb 2.8.0+ Fix from $1,6002026-04-14 MEDIUM 5.4 CVE-2026-39426 MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability where the fro… Maxkb 2.8.0+ Fix from $1,6002026-04-14 MEDIUM 5.4 CVE-2026-39423 MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an Eval Injection vulnerability in the Markdown rendering engin… Maxkb 2.8.0+ Fix from $1,6002026-04-14 HIGH 7.4 CVE-2026-39418 MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, sandbox network protection can be bypassed by using socket.sendto()… Maxkb 2.8.0+ Fix from $1,9502026-04-14 HIGH 7.4 CVE-2026-39420 MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an incomplete sandbox protection mechanism allows an authenticated … Maxkb 2.8.0+ Fix from $1,9502026-04-14 HIGH 7.4 CVE-2026-39421 MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a sandbox escape vulnerability in the ToolExecutor component. B… Maxkb 2.8.0+ Fix from $1,9502026-04-14 MEDIUM 5.4 CVE-2026-39422 MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability through the a… Maxkb 2.8.0+ Fix from $1,6002026-04-14 MEDIUM 5.5 CVE-2026-39417 MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an incomplete fix for CVE-2025-53928, where a Remote Code Execu… Maxkb 2.8.0+ Fix from $1,6002026-04-14 CRITICAL 10.0 CVE-2025-66419 MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environmen… Maxkb 2.4.0+ Fix from $2,3002025-12-11 HIGH 7.5 CVE-2025-66446 MaxKB is an open-source AI assistant for enterprise. Versions 2.3.1 and below have improper file permissions which allow attackers to overwrite the b… Maxkb 2.4.0+ Fix from $1,9502025-12-11 HIGH 8.8 CVE-2025-64511 MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can access internal network services such as databases throug… Maxkb 2.3.1+ Fix from $1,9502025-11-13 MEDIUM 6.5 CVE-2025-64703 MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can get sensitive informations by Python code in tool module,… Maxkb 2.3.1+ Fix from $1,6002025-11-13 CRITICAL 9.8 CVE-2025-53928 MaxKB is an open-source AI assistant for enterprise. Prior to versions 1.10.9-lts and 2.0.0, a Remote Command Execution vulnerability exists in the M… Maxkb 1.10.9+ Fix from $2,3002025-07-17 MEDIUM 6.3 CVE-2025-53927 MaxKB is an open-source AI assistant for enterprise. Prior to version 2.0.0, the sandbox design rules can be bypassed because MaxKB only restricts th… Maxkb 2.0.0+ Fix from $1,6002025-07-17 HIGH 8.8 CVE-2025-48950 MaxKB is an open-source AI assistant for enterprise. Prior to version 1.10.8-lts, Sandbox only restricts the execution permissions of binary files in… Maxkb 1.10.8+ Fix from $1,9502025-06-03 HIGH 8.8 CVE-2025-4546 A vulnerability was found in 1Panel-dev MaxKB up to 1.10.7. It has been declared as critical. Affected by this vulnerability is an unknown functional… Maxkb after 1.10.7 Fix from $1,9502025-05-11 HIGH 7.2 CVE-2025-32383 MaxKB (Max Knowledge Base) is an open source knowledge base question-answering system based on a large language model and retrieval-augmented generat… Maxkb 1.10.4+ Fix from $1,9502025-04-10 HIGH 7.2 CVE-2024-56137 MaxKB, which stands for Max Knowledge Base, is an open source knowledge base question-answering system based on a large language model and retrieval-… Maxkb 1.9.0+ Fix from $1,9502025-01-02