CVE-2025-64511High· 7.4▾ TwilightMaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can access internal network services such as databases through Python code in the tool module, although the process runs in a sandbox. Version 2.3.1 …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can access internal network services such as databases through Python code in the tool module, although the process runs in a sandbox. Version 2.3.1 fixes the issue.
maxkb < 2.3.1Upgrade past the affected range:
maxkb 2.3.1Connected by shared product, vendor, weakness, or advisory.
CVE-2026-77522Medium· 4.3MaxKB is an open-source AI assistant for enterprise
CVE-2025-68616High· 7.5WeasyPrint helps web developers to create PDF documents
CVE-2025-64703Medium· 6.3MaxKB is an open-source AI assistant for enterprise
CVE-2025-66446High· 8.8MaxKB is an open-source AI assistant for enterprise
CVE-2025-66419High· 8.8MaxKB is an open-source AI assistant for enterprise
CVE-2026-79919Medium· 6.3MaxKB is an open-source AI assistant for enterprise