Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-64703 EUVD-2025-175301

MaxKB has Information Leak in sandbox

Published Nov 13, 2025 · Updated Nov 13, 2025 · Assigned by GitHub_M

Description

MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can get sensitive informations by Python code in tool module, although the process run in sandbox. Version 2.3.1 fixes the issue.

Affected products

VendorProductAffectedFixed
1Panel-dev MaxKB < 2.3.1 —

References