CVE-2026-39417

MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an incomplete fix for CVE-2025-53928, where a Remote Code Execution vulnerability still exists in the MCP node of the workflow engine. MaxKB only restricts the referencing code path loading MCP config from the...

CVE-2025-53928

creationtimestamp| type| source ---|---|--- 2025-07-17 15:06:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu67h5az7c2o 2026-04-14 01:02:12+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mjg6n5kcag24...