← CVE Intelligence

CVE-2025-64511

MaxKB has SSRF in sandbox PUBLISHED

Description (CNA)

MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can access internal network services such as databases through Python code in the tool module, although the process runs in a sandbox. Version 2.3.1 fixes the issue.

Affected (CNA)

Vendor / productVersions
1Panel-dev / MaxKBaffected < 2.3.1

CWE

CWE-918

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.