MA
Product
MaxKB
by 1Panel-dev · last CVE Sep 21, 2026
43
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 12Medium 26Low 1
Watch

Add MaxKB to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54149
8.8
0%
Jul 10
MaxKB MCP tool import validation bypass allows post-authentication remote code execution
Affected: < 2.10.0-lts
CVE-2025-64511
8.8
0%
Nov 13
MaxKB has SSRF in sandbox
Affected: < 2.3.1
CVE-2025-48950
8.8
0%
Jun 3
MaxKB Python Sandbox Bypass in Function Library
Affected: < 1.10.8-lts
CVE-2025-4546
8.8
1%
May 11
1Panel-dev MaxKB Knowledge Base Module csv injection
Affected: 1.10.0; 1.10.1; 1.10.2; 1.10.3; 1.10.4; 1.10.5; +2 more
CVE-2026-44847
7.5
0%
May 26
MaxKB: Webhook Trigger Authentication Bypass
Affected: < 2.9.0
CVE-2025-66446
7.5
0%
Dec 11
MaxKB has a Python sandbox LD_PRELOAD bypass
Affected: < 2.4.0
CVE-2026-77523
7.4
0%
Sep 21
MaxKB: Cross-workspace model parameter form write
Affected: <= 2.10.3-lts
CVE-2026-39421
7.4
0%
Apr 14
MaxKB: Sandbox escape via ctypes and unhooked SYS_pkey_mprotect
Affected: < 2.8.0
CVE-2026-39420
7.4
0%
Apr 14
MaxKB: Sandbox escape via LD_PRELOAD bypass
Affected: < 2.8.0
CVE-2026-39418
7.4
0%
Apr 14
MaxKB: SSRF via sandbox network hook bypass
Affected: < 2.8.0
CVE-2025-32383
7.2
0%
Apr 10
MaxKB has a reverse shell vulnerability in function library
Affected: < 1.10.4-lts
CVE-2024-56137
7.2
1%
Jan 2
MaxKB RCE vulnerability in function library
Affected: < 1.9.0
Showing 12