What’s Vulnerable › Vulnerabilities

CVE-2025-53927: MaxKB sandbox bypass

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-07-17 · updated 2026-06-17
• Weakness: CWE-94

Description

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.0.0, the sandbox design rules can be bypassed because MaxKB only restricts the execution permissions of files in a specific directory. Therefore, an attacker can use the `shutil.copy2` method in Python to copy the command they want to execute to the executable directory. This bypasses directory restrictions and reverse shell. Version 2.0.0 fixes the issue.

Affected products

• 1Panel-dev MaxKB: before 2.0.0 — fixed in 2.0.0

How to fix

Upgrade to a fixed version: 1Panel-dev MaxKB 2.0.0. Check the vendor advisory for mitigations.

References

• https://github.com/1Panel-dev/MaxKB/releases/tag/v2.0.0
• https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-5xhm-4j3v-87m4

Get alerted when CVE-2025-53927 or the next vulnerability affects your stack