CVE-2025-64703

Published: Nov 13, 2025Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can get sensitive informations by Python code in tool module, although the process run in sandbox. Version 2.3.1 fixes the issue.

Affected (1)

Products: Maxkb: Maxkb

Maxkb

1 product

Maxkb

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Maxkb Maxkb	Before 2.3.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-qwvm-x4xh-g2qq

Source: security-advisories@github.com

Vendor Advisory

Timeline

No history available yet.