Back to search
CVE-2025-48950
Published: Jun 3, 2025
Modified: Jun 3, 2025
PUBLISHED
Description
MaxKB is an open-source AI assistant for enterprise. Prior to version 1.10.8-lts, Sandbox only restricts the execution permissions of binary files in common directories, such as `/bin,/usr/bin`, etc. Therefore, attackers can exploit some files with execution permissions in non blacklisted directories to carry out attacks. Version 1.10.8-lts fixes the issue.
| Vendor | Product | Versions |
|---|---|---|
1Panel-dev | MaxKB | affected < 1.10.8-lts |
Weaknesses (CWE)
References
https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-p2qq-x9j2-px8v
x_refsource_CONFIRM
https://github.com/1Panel-dev/MaxKB/pull/3127
x_refsource_MISC
https://github.com/1Panel-dev/MaxKB/releases/tag/v1.10.8-lts
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now