Lucene search
+L

7 matches found

NVD
NVD
added 2026/04/14 1:16 a.m.13 views

CVE-2026-39418

MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, sandbox network protection can be bypassed by using socket.sendto with the MSGFASTOPEN flag. This allows authenticated user with tool-editing permissions to reach internal services that are explicitly blocked by the...

7.4CVSS0.00198EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/14 12:08 a.m.5 views

CVE-2026-39418 MaxKB: SSRF via sandbox network hook bypass

MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, sandbox network protection can be bypassed by using socket.sendto with the MSGFASTOPEN flag. This allows authenticated user with tool-editing permissions to reach internal services that are explicitly blocked by the...

5CVSS5.7AI score0.00198EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/07/19 2:02 p.m.20 views

CVE-2025-53927

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.0.0, the sandbox design rules can be bypassed because MaxKB only restricts the execution permissions of files in a specific directory. Therefore, an attacker can use the shutil.copy2 method in Python to copy the command they...

6.3CVSS6.9AI score0.00231EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/07/17 1:50 p.m.6 views

CVE-2025-53927 MaxKB sandbox bypass

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.0.0, the sandbox design rules can be bypassed because MaxKB only restricts the execution permissions of files in a specific directory. Therefore, an attacker can use the shutil.copy2 method in Python to copy the command they...

4.6CVSS7.6AI score0.00231EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/07/17 1:50 p.m.22 views

CVE-2025-53927 MaxKB sandbox bypass

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.0.0, the sandbox design rules can be bypassed because MaxKB only restricts the execution permissions of files in a specific directory. Therefore, an attacker can use the shutil.copy2 method in Python to copy the command they...

4.6CVSS0.00231EPSS
SaveExploits1References2
CVE
CVE
added 2025/07/17 1:50 p.m.44 views

CVE-2025-53927

MaxKB before 2.0.0 has a sandbox bypass where the security design restricts only a specific directory’s execution permissions. An attacker can abuse Python’s shutil.copy2 to copy a command into the executable directory, bypassing the directory restrictions and enabling a reverse shell. Affected p...

6.3CVSS7.1AI score0.00231EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/03 6:16 p.m.15 views

CVE-2025-48950 MaxKB Python Sandbox Bypass in Function Library

MaxKB is an open-source AI assistant for enterprise. Prior to version 1.10.8-lts, Sandbox only restricts the execution permissions of binary files in common directories, such as /bin,/usr/bin, etc. Therefore, attackers can exploit some files with execution permissions in non blacklisted directori...

6.5CVSS6.6AI score0.00447EPSS
SaveExploits1References4
Rows per page
Query Builder