1Panel-dev MaxKB

• CVE-2026-79919 Medium 6.3 MaxKB function-library sandbox escape: dlopen stack-check bypass via importlib meta-path callbacks and unhooked dlsym(RTLD_NEXT) 0.4%
• CVE-2026-79918 Medium 6.3 MaxKB: Sandbox escape via unhooked fexecve 0.4%
• CVE-2026-77517 Medium 5.4 MaxKB cross-knowledge IDOR lets a normal user read and modify documents and paragraphs in another knowledge base 0.2%
• CVE-2026-77521 Critical 10.0 MaxKB: Prompt-injectable agent can lead to command execution 1.0%
• CVE-2026-77522 Medium 4.3 MaxKB: Authenticated full-read SSRF via the knowledge web-document import/sync crawler (Fork.fork requests.get, no internal-IP guard, non-blind) 0.3%
• CVE-2026-79917 Medium 6.5 MaxKB: Chat share-link endpoint missing owner check: a chat token can publish another user's conversation 0.3%
• CVE-2026-77516 Medium 5.4 MaxKB: Missing per-tool authorization in the agent and workflow tool-dispatch path 0.2%
• CVE-2026-77523 High 7.4 MaxKB: Cross-workspace model parameter form write 0.3%
• CVE-2026-77525 Medium 4.2 MaxKB: Management chat-record routes trust path application_id but load ChatRecord by global chat_id 0.2%
• CVE-2026-77518 Medium 5.0 MaxKB: Known MCP tool IDs expose owner Tool.code and can be referenced by attacker workflows 0.3%
• CVE-2026-79916 Critical 9.1 MaxKB AWS Bedrock model credential injection leads to remote code execution 0.4%
• CVE-2026-77520 Medium 5.4 MaxKB: Homepage ranking leaks application IDs that workflow application-nodes can use to invoke another user's application 0.2%
• CVE-2026-77519 Medium 5.4 MaxKB: Expired application API keys remain usable on `/chat/api/mcp` 0.2%
• CVE-2026-64870 Medium 5.3 MaxKB: UpdateStoreTool fetches caller-supplied app-store URLs without host validation 0.4%
• CVE-2026-54149 High 8.8 MaxKB MCP tool import validation bypass allows post-authentication remote code execution 0.5%
• CVE-2026-56779 Medium 6.4 MaxKB < 2.10.0 - Server-Side Request Forgery via downloadCallbackUrl and download_url Parameters 0.3%
• CVE-2026-42336 Medium 5.1 MaxKB: SSRF Bypass via DNS Rebinding in MaxKB OSS URL Fetch 0.2%
• CVE-2026-42337 Medium 5.3 MaxKB: Broken Access Control in MaxKB OSS URL Fetch API 0.2%
• CVE-2026-44847 High 7.5 MaxKB: Webhook Trigger Authentication Bypass 0.3%
• CVE-2026-45412 Medium 6.3 MaxKB: Unauthenticated SSRF via Workflow Template Import 0.2%
• CVE-2026-45413 Medium 6.9 MaxKB: Unsalted MD5 Password Hashing <0.1%
• CVE-2026-42335 Medium 6.3 MaxKB: SSRF Bypass in MaxKB OSS URL Fetch due to URL Parsing Discrepancy 0.2%
• CVE-2026-39426 Medium 5.1 MaxKB: Stored XSS via Unsanitized iframe_render Parsing 0.2%
• CVE-2026-39425 Medium 5.1 MaxKB: Stored XSS via Unsanitized html_rander Tags in Markdown Rendering 0.2%
• CVE-2026-39419 Low 3.1 MaxKB: Sandbox Result Validation Bypass via Tool Output Spoofing 0.2%
• CVE-2026-39424 Medium 5.3 MaxKB has CSV Injection in its Application Chat Export Functionality 0.4%
• CVE-2026-39423 Medium 6.9 Stored XSS via Eval Injection in EchartsRander Component 0.2%
• CVE-2026-39422 Medium 6.9 MaxKB has Stored XSS via ChatHeadersMiddleware 0.2%
• CVE-2026-39421 Medium 6.3 MaxKB: Sandbox escape via ctypes and unhooked SYS_pkey_mprotect 0.3%
• CVE-2026-39420 Medium 6.3 MaxKB: Sandbox escape via LD_PRELOAD bypass 0.5%
• CVE-2026-39418 Medium 5.0 MaxKB: SSRF via sandbox network hook bypass 0.2%
• CVE-2026-39417 Medium 4.6 MaxKB: RCE via MCP stdio command injection in workflow engine 0.2%
• CVE-2025-15632 Low 3.5 1Panel-dev MaxKB MdPreview chat.ts cross site scripting 0.3%
• CVE-2026-6108 Medium 6.3 1Panel-dev MaxKB Model Context Protocol Node base_mcp_node.py execute os command injection 1.5%
• CVE-2026-6107 Low 3.5 1Panel-dev MaxKB ChatHeadersMiddleware chat_headers_middleware.py cross site scripting 0.2%
• CVE-2026-6106 Low 3.5 1Panel-dev MaxKB Public Chat static_headers_middleware.py StaticHeadersMiddleware cross site scripting 0.3%
• CVE-2025-66446 High 8.8 MaxKB has a Python sandbox LD_PRELOAD bypass 0.3%
• CVE-2025-66419 High 8.8 MaxKB vulnerable to privilege escalation through sandbox bypass 0.3%
• CVE-2025-64703 Medium 6.3 MaxKB has Information Leak in sandbox 0.2%
• CVE-2025-64511 High 7.4 MaxKB has SSRF in sandbox 0.2%
• CVE-2025-10433 Medium 6.3 1Panel-dev MaxKB debug deserialization 0.3%
• CVE-2025-53928 Medium 4.6 MaxKB has RCE in MCP call 0.5%
• CVE-2025-53927 Medium 4.6 MaxKB sandbox bypass 0.3%
• CVE-2025-48950 Medium 5.8 MaxKB Python Sandbox Bypass in Function Library 0.5%
• CVE-2025-4546 Medium 4.7 1Panel-dev MaxKB Knowledge Base Module csv injection 0.7%
• CVE-2025-32383 Medium 4.3 MaxKB has a reverse shell vulnerability in function library 0.3%
• CVE-2024-56137 Medium 6.8 MaxKB RCE vulnerability in function library 0.8%