Skip to content
Maxkb Maxkb vulnerabilities
-
1panel-dev maxkb
MaxKB: Stored XSS via Unsanitized iframe_render Parsing
CVE-2026-39426
5.1 Medium
-
1panel-dev maxkb
MaxKB: Stored XSS via Unsanitized html_rander Tags in Markdown Rendering
CVE-2026-39425
5.1 Medium
-
1panel-dev maxkb
MaxKB: Sandbox Result Validation Bypass via Tool Output Spoofing
CVE-2026-39419
3.1 Low
-
1panel-dev maxkb
MaxKB has CSV Injection in its Application Chat Export Functionality
CVE-2026-39424
5.3 Medium
-
1panel-dev maxkb
Stored XSS via Eval Injection in EchartsRander Component
CVE-2026-39423
6.9 Medium
-
1panel-dev maxkb
MaxKB has Stored XSS via ChatHeadersMiddleware
CVE-2026-39422
6.9 Medium
-
1panel-dev maxkb
MaxKB: Sandbox escape via ctypes and unhooked SYS_pkey_mprotect
CVE-2026-39421
6.3 Medium
-
1panel-dev maxkb
MaxKB: Sandbox escape via LD_PRELOAD bypass
CVE-2026-39420
6.3 Medium
-
1panel-dev maxkb
MaxKB: SSRF via sandbox network hook bypass
CVE-2026-39418
5.0 Medium
-
1panel-dev maxkb
MaxKB: RCE via MCP stdio command injection in workflow engine
CVE-2026-39417
4.6 Medium
-
1panel-dev maxkb
MaxKB has a Python sandbox LD_PRELOAD bypass
CVE-2025-66446
8.8 High
-
1panel-dev maxkb
MaxKB vulnerable to privilege escalation through sandbox bypass
CVE-2025-66419
8.8 High
-
1panel-dev maxkb
MaxKB has Information Leak in sandbox
CVE-2025-64703
6.3 Medium
-
1panel-dev maxkb
MaxKB has SSRF in sandbox
CVE-2025-64511
7.4 High
-
1panel-dev maxkb
MaxKB has RCE in MCP call
CVE-2025-53928
4.6 Medium
-
1panel-dev maxkb
MaxKB sandbox bypass
CVE-2025-53927
4.6 Medium
-
1panel-dev maxkb
MaxKB Python Sandbox Bypass in Function Library
CVE-2025-48950
5.8 Medium
-
1panel-dev maxkb
1Panel-dev MaxKB Knowledge Base Module csv injection
CVE-2025-4546
5.1 Medium
-
1panel-dev maxkb
MaxKB has a reverse shell vulnerability in function library
CVE-2025-32383
4.3 Medium
-
1panel-dev maxkb
MaxKB RCE vulnerability in function library
CVE-2024-56137
6.8 Medium