VYPR
← All advisories
High severity8.8NVD Advisory· Published Dec 11, 2025· Updated Jun 17, 2026

CVE-2025-66419

CVE-2025-66419

Description

MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environment and escalate privileges under certain concurrent conditions. This issue is fixed in version 2.4.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • 1panel Dev/Maxkb3 versions
    cpe:2.3:a:maxkb:maxkb:*:*:*:*:-:*:*:*+ 2 more
    • cpe:2.3:a:maxkb:maxkb:*:*:*:*:-:*:*:*range: <2.4.0
    • (no CPE)range: <=2.3.1
    • (no CPE)range: < 2.4.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.