MA
Product
MaxKB
43
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 12Medium 26Low 1
Watch
Add MaxKB to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-54149 | 8.8 | Jul 10 | MaxKB MCP tool import validation bypass allows post-authentication remote code execution Affected: < 2.10.0-lts |
| CVE-2025-64511 | 8.8 | Nov 13 | MaxKB has SSRF in sandbox Affected: < 2.3.1 |
| CVE-2025-48950 | 8.8 | Jun 3 | MaxKB Python Sandbox Bypass in Function Library Affected: < 1.10.8-lts |
| CVE-2025-4546 | 8.8 | May 11 | 1Panel-dev MaxKB Knowledge Base Module csv injection Affected: 1.10.0; 1.10.1; 1.10.2; 1.10.3; 1.10.4; 1.10.5; +2 more |
| CVE-2026-44847 | 7.5 | May 26 | MaxKB: Webhook Trigger Authentication Bypass Affected: < 2.9.0 |
| CVE-2025-66446 | 7.5 | Dec 11 | MaxKB has a Python sandbox LD_PRELOAD bypass Affected: < 2.4.0 |
| CVE-2026-77523 | 7.4 | Sep 21 | MaxKB: Cross-workspace model parameter form write Affected: <= 2.10.3-lts |
| CVE-2026-39421 | 7.4 | Apr 14 | MaxKB: Sandbox escape via ctypes and unhooked SYS_pkey_mprotect Affected: < 2.8.0 |
| CVE-2026-39420 | 7.4 | Apr 14 | MaxKB: Sandbox escape via LD_PRELOAD bypass Affected: < 2.8.0 |
| CVE-2026-39418 | 7.4 | Apr 14 | MaxKB: SSRF via sandbox network hook bypass Affected: < 2.8.0 |
| CVE-2025-32383 | 7.2 | Apr 10 | MaxKB has a reverse shell vulnerability in function library Affected: < 1.10.4-lts |
| CVE-2024-56137 | 7.2 | Jan 2 | MaxKB RCE vulnerability in function library Affected: < 1.9.0 |
Showing 12
