Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2025-53928

MaxKB has RCE in MCP call

Description

MaxKB is an open-source AI assistant for enterprise. Prior to versions 1.10.9-lts and 2.0.0, a Remote Command Execution vulnerability exists in the MCP call. Versions 1.10.9-lts and 2.0.0 fix the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

1Panel-dev MaxKB

  • < 2.0.0affected
  • < 1.10.9-ltsaffected

References