CVE-2025-64703

MaxKB has Information Leak in sandbox PUBLISHED

Description (CNA)

MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can get sensitive informations by Python code in tool module, although the process run in sandbox. Version 2.3.1 fixes the issue.

Affected (CNA)

Vendor / product	Versions
1Panel-dev / MaxKB	affected < 2.3.1

CWE

CWE-200

References

https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-qwvm-x4xh-g2qq

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.