Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-45413

MaxKB: Unsalted MD5 Password Hashing

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

MaxKB is an open-source AI assistant for enterprise. Prior to 2.9.1, user passwords are stored using unsalted MD5 hashes, making them trivially crackable via rainbow tables or GPU-accelerated brute force (hashcat). This vulnerability is fixed in 2.9.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

1Panel-dev MaxKB

  • < 2.9.1affected

References