1Panel-dev MaxKB

13 known vulnerabilities in 1Panel-dev MaxKB, 2 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-79919 CVSS 6.3 medium MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, function-library code running under the LD_PRELOAD…
  • CVE-2026-79918 CVSS 6.3 medium MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, the ToolExecutor LD_PRELOAD sandbox hooks execve…
  • CVE-2026-79917 CVSS 6.5 medium MaxKB is an open-source AI assistant for enterprise. In 2.7.0 through 2.10.4-lts, POST…
  • CVE-2026-79916 CVSS 9.1 critical MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.5-lts, authenticated workspace members can inject control characters…
  • CVE-2026-77525 CVSS 4.2 medium MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, management chat-record routes authorize the path…
  • CVE-2026-77523 CVSS 7.4 high MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the model parameter form route authorizes the path…
  • CVE-2026-77522 CVSS 4.3 medium MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the knowledge web-document import and…
  • CVE-2026-77521 CVSS 10.0 critical MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.5-lts, assistants with a tool, MCP tool, skill, or…
  • CVE-2026-77520 CVSS 5.4 medium MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal user in the same workspace can obtain another…
  • CVE-2026-77519 CVSS 5.4 medium MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, the /chat/api/mcp authentication path looks up an…
  • CVE-2026-77518 CVSS 5.0 medium MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal workspace user who knows another user's active…
  • CVE-2026-77517 CVSS 5.4 medium MaxKB is an open-source AI assistant for enterprise. From version 2.0.0 through 2.10.2-lts, document and paragraph operate routes…
  • CVE-2026-77516 CVSS 5.4 medium MaxKB is an open-source AI assistant for enterprise. From version 2.0.0 through 2.9.2, a lowest-role workspace member denied access to a…