VYPR
← All advisories
Medium severity6.8NVD Advisory· Published Jan 2, 2025· Updated Jun 17, 2026

CVE-2024-56137

CVE-2024-56137

Description

MaxKB, which stands for Max Knowledge Base, is an open source knowledge base question-answering system based on a large language model and retrieval-augmented generation (RAG). Prior to version 1.9.0, a remote command execution vulnerability exists in the module of function library. The vulnerability allow privileged‌ users to execute OS command in custom scripts. The vulnerability has been fixed in v1.9.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • 1panel Dev/Maxkb3 versions
    cpe:2.3:a:maxkb:maxkb:*:*:*:*:-:*:*:*+ 2 more
    • cpe:2.3:a:maxkb:maxkb:*:*:*:*:-:*:*:*range: <1.9.0
    • (no CPE)range: <1.9.0
    • (no CPE)range: < 1.9.0
  • 1panel Dev/Max Knowledge Basellm-create
    Range: <1.9.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.