Vulnerability index

Browse CVEs

18 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Maxkb MEDIUM 5.4
CVE-2026-39425

MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability that allows a…

Fix: 2.8.0+
Fix from $1,600 2026-04-14
Maxkb MEDIUM 5.4
CVE-2026-39426

MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability where the fro…

Fix: 2.8.0+
Fix from $1,600 2026-04-14
Maxkb MEDIUM 5.4
CVE-2026-39423

MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an Eval Injection vulnerability in the Markdown rendering engin…

Fix: 2.8.0+
Fix from $1,600 2026-04-14
Maxkb HIGH 7.4
CVE-2026-39418

MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, sandbox network protection can be bypassed by using socket.sendto()…

Fix: 2.8.0+
Fix from $1,950 2026-04-14
Maxkb HIGH 7.4
CVE-2026-39420

MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an incomplete sandbox protection mechanism allows an authenticated …

Fix: 2.8.0+
Fix from $1,950 2026-04-14
Maxkb HIGH 7.4
CVE-2026-39421

MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a sandbox escape vulnerability in the ToolExecutor component. B…

Fix: 2.8.0+
Fix from $1,950 2026-04-14
Maxkb MEDIUM 5.4
CVE-2026-39422

MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability through the a…

Fix: 2.8.0+
Fix from $1,600 2026-04-14
Maxkb MEDIUM 5.5
CVE-2026-39417

MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an incomplete fix for CVE-2025-53928, where a Remote Code Execu…

Fix: 2.8.0+
Fix from $1,600 2026-04-14
Maxkb CRITICAL 10.0
CVE-2025-66419

MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environmen…

Fix: 2.4.0+
Fix from $2,300 2025-12-11
Maxkb HIGH 7.5
CVE-2025-66446

MaxKB is an open-source AI assistant for enterprise. Versions 2.3.1 and below have improper file permissions which allow attackers to overwrite the b…

Fix: 2.4.0+
Fix from $1,950 2025-12-11
Maxkb HIGH 8.8
CVE-2025-64511

MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can access internal network services such as databases throug…

Fix: 2.3.1+
Fix from $1,950 2025-11-13
Maxkb MEDIUM 6.5
CVE-2025-64703

MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can get sensitive informations by Python code in tool module,…

Fix: 2.3.1+
Fix from $1,600 2025-11-13
Maxkb CRITICAL 9.8
CVE-2025-53928

MaxKB is an open-source AI assistant for enterprise. Prior to versions 1.10.9-lts and 2.0.0, a Remote Command Execution vulnerability exists in the M…

Fix: 1.10.9+
Fix from $2,300 2025-07-17
Maxkb MEDIUM 6.3
CVE-2025-53927

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.0.0, the sandbox design rules can be bypassed because MaxKB only restricts th…

Fix: 2.0.0+
Fix from $1,600 2025-07-17
Maxkb HIGH 8.8
CVE-2025-48950

MaxKB is an open-source AI assistant for enterprise. Prior to version 1.10.8-lts, Sandbox only restricts the execution permissions of binary files in…

Fix: 1.10.8+
Fix from $1,950 2025-06-03
Maxkb HIGH 8.8
CVE-2025-4546

A vulnerability was found in 1Panel-dev MaxKB up to 1.10.7. It has been declared as critical. Affected by this vulnerability is an unknown functional…

Fix: after 1.10.7
Fix from $1,950 2025-05-11
Maxkb HIGH 7.2
CVE-2025-32383

MaxKB (Max Knowledge Base) is an open source knowledge base question-answering system based on a large language model and retrieval-augmented generat…

Fix: 1.10.4+
Fix from $1,950 2025-04-10
Maxkb HIGH 7.2
CVE-2024-56137

MaxKB, which stands for Max Knowledge Base, is an open source knowledge base question-answering system based on a large language model and retrieval-…

Fix: 1.9.0+
Fix from $1,950 2025-01-02