Medium severity · published Sep 15, 2025
CVE-2025-10433
1Panel-dev MaxKB debug deserialization
6.3
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability was determined in 1Panel-dev MaxKB up to 2.0.2/2.1.0. This issue affects some unknown processing of the file /admin/api/workspace/default/tool/debug. Executing manipulation of the argument code can lead to deserialization. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.1.1 is capable of addressing this issue. It is suggested to upgrade the affected component.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
MaxKB · 1Panel-dev
2.0; 2.0.0; 2.0.1; 2.0.2; 2.1.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-10433
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-10433
github.com
https://github.com/1Panel-dev/MaxKB/releases/tag/v2.1.1
vuldb.com
https://vuldb.com/?ctiid.323867
vuldb.com
https://vuldb.com/?id.323867
vuldb.com
https://vuldb.com/?submit.647589
zealous-brand-b4a.notion.site
https://zealous-brand-b4a.notion.site/MaxKB-2-1-0-tool-debug-RCE-2647244a828c80e7850dc6503061b88b
More from MaxKB
10.0
CVE-2026-77521
MaxKB: Prompt-injectable agent can lead to command execution
10.0
CVE-2025-66419
MaxKB vulnerable to privilege escalation through sandbox bypass
9.8
CVE-2025-53928
MaxKB has RCE in MCP call
9.1
CVE-2026-79916
MaxKB AWS Bedrock model credential injection leads to remote code execution
8.8
CVE-2026-54149
MaxKB MCP tool import validation bypass allows post-authentication remote code execution