Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-32383

MaxKB has a reverse shell vulnerability in function library

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

MaxKB (Max Knowledge Base) is an open source knowledge base question-answering system based on a large language model and retrieval-augmented generation (RAG). A reverse shell vulnerability exists in the module of function library. The vulnerability allow privileged‌ users to create a reverse shell. This vulnerability is fixed in v1.10.4-lts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

1Panel-dev MaxKB

  • < 1.10.4-ltsaffected

References