Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-64703

MaxKB has Information Leak in sandbox

Description

MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can get sensitive informations by Python code in tool module, although the process run in sandbox. Version 2.3.1 fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

1Panel-dev MaxKB

  • < 2.3.1affected

References