Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2025-64511

MaxKB has SSRF in sandbox

Description

MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can access internal network services such as databases through Python code in the tool module, although the process runs in a sandbox. Version 2.3.1 fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

1Panel-dev MaxKB

  • < 2.3.1affected

References