1panel-dev Maxkb vulnerabilities

• 1panel-dev maxkb MaxKB function-library sandbox escape: dlopen stack-check bypass via importlib meta-path callbacks and unhooked dlsym(RTLD_NEXT) CVE-2026-79919 6.3 MediumSeptember 21, 2026
• 1panel-dev maxkb MaxKB: Sandbox escape via unhooked fexecve CVE-2026-79918 6.3 MediumSeptember 21, 2026
• 1panel-dev maxkb MaxKB cross-knowledge IDOR lets a normal user read and modify documents and paragraphs in another knowledge base CVE-2026-77517 5.4 MediumSeptember 21, 2026
• 1panel-dev maxkb MaxKB: Prompt-injectable agent can lead to command execution CVE-2026-77521 Public exploit 10.0 CriticalSeptember 21, 2026
• 1panel-dev maxkb MaxKB: Authenticated full-read SSRF via the knowledge web-document import/sync crawler (Fork.fork requests.get, no internal-IP guard, non-blind) CVE-2026-77522 4.3 MediumSeptember 21, 2026
• 1panel-dev maxkb MaxKB: Chat share-link endpoint missing owner check: a chat token can publish another user's conversation CVE-2026-79917 6.5 MediumSeptember 21, 2026
• 1panel-dev maxkb MaxKB: Missing per-tool authorization in the agent and workflow tool-dispatch path CVE-2026-77516 5.4 MediumSeptember 21, 2026
• 1panel-dev maxkb MaxKB: Cross-workspace model parameter form write CVE-2026-77523 7.4 HighSeptember 21, 2026
• 1panel-dev maxkb MaxKB: Management chat-record routes trust path application_id but load ChatRecord by global chat_id CVE-2026-77525 4.2 MediumSeptember 21, 2026
• 1panel-dev maxkb MaxKB: Known MCP tool IDs expose owner Tool.code and can be referenced by attacker workflows CVE-2026-77518 5.0 MediumSeptember 21, 2026
• 1panel-dev maxkb MaxKB AWS Bedrock model credential injection leads to remote code execution CVE-2026-79916 9.1 CriticalSeptember 21, 2026
• 1panel-dev maxkb MaxKB: Homepage ranking leaks application IDs that workflow application-nodes can use to invoke another user's application CVE-2026-77520 5.4 MediumSeptember 21, 2026
• 1panel-dev maxkb MaxKB: Expired application API keys remain usable on `/chat/api/mcp` CVE-2026-77519 5.4 MediumSeptember 21, 2026
• 1panel-dev maxkb MaxKB: UpdateStoreTool fetches caller-supplied app-store URLs without host validation CVE-2026-64870 5.3 MediumJuly 30, 2026
• 1panel-dev maxkb MaxKB MCP tool import validation bypass allows post-authentication remote code execution CVE-2026-54149 8.8 HighJuly 10, 2026
• 1panel-dev maxkb MaxKB < 2.10.0 - Server-Side Request Forgery via downloadCallbackUrl and download_url Parameters CVE-2026-56779 5.3 MediumJune 25, 2026
• 1panel-dev maxkb MaxKB: SSRF Bypass via DNS Rebinding in MaxKB OSS URL Fetch CVE-2026-42336 5.1 MediumMay 26, 2026
• 1panel-dev maxkb MaxKB: Broken Access Control in MaxKB OSS URL Fetch API CVE-2026-42337 5.3 MediumMay 26, 2026
• 1panel-dev maxkb MaxKB: Webhook Trigger Authentication Bypass CVE-2026-44847 7.5 HighMay 26, 2026
• 1panel-dev maxkb MaxKB: Unauthenticated SSRF via Workflow Template Import CVE-2026-45412 6.3 MediumMay 26, 2026
• 1panel-dev maxkb MaxKB: Unsalted MD5 Password Hashing CVE-2026-45413 6.9 MediumMay 26, 2026
• 1panel-dev maxkb MaxKB: SSRF Bypass in MaxKB OSS URL Fetch due to URL Parsing Discrepancy CVE-2026-42335 6.3 MediumMay 26, 2026
• 1panel-dev maxkb MaxKB: Stored XSS via Unsanitized iframe_render Parsing CVE-2026-39426 5.1 MediumApril 14, 2026
• 1panel-dev maxkb MaxKB: Stored XSS via Unsanitized html_rander Tags in Markdown Rendering CVE-2026-39425 5.1 MediumApril 14, 2026
• 1panel-dev maxkb MaxKB: Sandbox Result Validation Bypass via Tool Output Spoofing CVE-2026-39419 3.1 LowApril 14, 2026
• 1panel-dev maxkb MaxKB has CSV Injection in its Application Chat Export Functionality CVE-2026-39424 5.3 MediumApril 14, 2026
• 1panel-dev maxkb Stored XSS via Eval Injection in EchartsRander Component CVE-2026-39423 6.9 MediumApril 14, 2026
• 1panel-dev maxkb MaxKB has Stored XSS via ChatHeadersMiddleware CVE-2026-39422 6.9 MediumApril 14, 2026
• 1panel-dev maxkb MaxKB: Sandbox escape via ctypes and unhooked SYS_pkey_mprotect CVE-2026-39421 6.3 MediumApril 14, 2026
• 1panel-dev maxkb MaxKB: Sandbox escape via LD_PRELOAD bypass CVE-2026-39420 6.3 MediumApril 14, 2026
• 1panel-dev maxkb MaxKB: SSRF via sandbox network hook bypass CVE-2026-39418 5.0 MediumApril 14, 2026
• 1panel-dev maxkb MaxKB: RCE via MCP stdio command injection in workflow engine CVE-2026-39417 4.6 MediumApril 14, 2026
• 1panel-dev maxkb 1Panel-dev MaxKB MdPreview chat.ts cross site scripting CVE-2025-15632 5.1 MediumApril 13, 2026
• 1panel-dev maxkb 1Panel-dev MaxKB Model Context Protocol Node base_mcp_node.py execute os command injection CVE-2026-6108 5.3 MediumApril 12, 2026
• 1panel-dev maxkb 1Panel-dev MaxKB ChatHeadersMiddleware chat_headers_middleware.py cross site scripting CVE-2026-6107 5.1 MediumApril 12, 2026
• 1panel-dev maxkb 1Panel-dev MaxKB Public Chat static_headers_middleware.py StaticHeadersMiddleware cross site scripting CVE-2026-6106 5.1 MediumApril 11, 2026
• 1panel-dev maxkb MaxKB has a Python sandbox LD_PRELOAD bypass CVE-2025-66446 8.8 HighDecember 11, 2025
• 1panel-dev maxkb MaxKB vulnerable to privilege escalation through sandbox bypass CVE-2025-66419 8.8 HighDecember 11, 2025
• 1panel-dev maxkb MaxKB has Information Leak in sandbox CVE-2025-64703 6.3 MediumNovember 13, 2025
• 1panel-dev maxkb MaxKB has SSRF in sandbox CVE-2025-64511 7.4 HighNovember 13, 2025
• 1panel-dev maxkb 1Panel-dev MaxKB debug deserialization CVE-2025-10433 5.3 MediumSeptember 15, 2025
• 1panel-dev maxkb MaxKB has RCE in MCP call CVE-2025-53928 4.6 MediumJuly 17, 2025
• 1panel-dev maxkb MaxKB sandbox bypass CVE-2025-53927 4.6 MediumJuly 17, 2025
• 1panel-dev maxkb MaxKB Python Sandbox Bypass in Function Library CVE-2025-48950 5.8 MediumJune 3, 2025
• 1panel-dev maxkb 1Panel-dev MaxKB Knowledge Base Module csv injection CVE-2025-4546 5.1 MediumMay 11, 2025
• 1panel-dev maxkb MaxKB has a reverse shell vulnerability in function library CVE-2025-32383 4.3 MediumApril 10, 2025
• 1panel-dev maxkb MaxKB RCE vulnerability in function library CVE-2024-56137 6.8 MediumJanuary 2, 2025