6.3
Moyenne
CVE-2026-79918 MaxKB is an open-source AI assistant for enterprise
Description
MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, the ToolExecutor LD_PRELOAD sandbox hooks execve, execvpe, and execveat to prevent subprocess creation but does not hook fexecve. An authenticated attacker able to execute tool code can call fexecve to start a process outside the sandbox's intended subprocess policy. This issue is fixed in version 2.10.6-lts.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MaxKB 2.10 | premières → < 2.10.6-lts | 2.10.6-lts |
Autres CVE de MaxKB
Les 47 CVE de MaxKB →
CVE-2026-79919
MaxKB is an open-source AI assistant for enterprise
6.3
Moyenne
CVE-2026-77517
MaxKB is an open-source AI assistant for enterprise
5.4
Moyenne
CVE-2026-77521
MaxKB is an open-source AI assistant for enterprise
10.0
Critique
CVE-2026-77522
MaxKB is an open-source AI assistant for enterprise
4.3
Moyenne