6.3
Medium
CVE-2026-79918 MaxKB is an open-source AI assistant for enterprise
Description
MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, the ToolExecutor LD_PRELOAD sandbox hooks execve, execvpe, and execveat to prevent subprocess creation but does not hook fexecve. An authenticated attacker able to execute tool code can call fexecve to start a process outside the sandbox's intended subprocess policy. This issue is fixed in version 2.10.6-lts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MaxKB 2.10 | earliest → < 2.10.6-lts | 2.10.6-lts |
Other CVEs of MaxKB
The 47 CVEs of MaxKB →
CVE-2026-79919
MaxKB is an open-source AI assistant for enterprise
6.3
Medium
CVE-2026-77517
MaxKB is an open-source AI assistant for enterprise
5.4
Medium
CVE-2026-77521
MaxKB is an open-source AI assistant for enterprise
10.0
Critical
CVE-2026-77522
MaxKB is an open-source AI assistant for enterprise
4.3
Medium