CVE-2025-64703Medium· 6.3▾ SunlitMaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can get sensitive informations by Python code in tool module, although the process run in sandbox. Version 2.3.1 fixes the issue.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 34.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can get sensitive informations by Python code in tool module, although the process run in sandbox. Version 2.3.1 fixes the issue.
maxkb < 2.3.1Upgrade past the affected range:
maxkb 2.3.1Connected by shared product, vendor, weakness, or advisory.
CVE-2025-64511High· 7.4MaxKB is an open-source AI assistant for enterprise
CVE-2025-66446High· 8.8MaxKB is an open-source AI assistant for enterprise
CVE-2025-66419High· 8.8MaxKB is an open-source AI assistant for enterprise
CVE-2026-79919Medium· 6.3MaxKB is an open-source AI assistant for enterprise
CVE-2026-79918Medium· 6.3MaxKB is an open-source AI assistant for enterprise
CVE-2026-77519Medium· 5.4MaxKB is an open-source AI assistant for enterprise