PT-2026-32574 · Maxkb · Maxkb

Liqiang-Fit2Cloud · Published 2026-04-14 · Updated 2026-04-14 · CVE-2026-39420

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.8.0

Description An incomplete sandbox protection mechanism allows an authenticated user with tool execution privileges to escape the LD PRELOAD-based sandbox. The system restricts untrusted Python code execution via the 'Tool Debug API' by injecting sandbox.so through the LD PRELOAD environment variable to intercept sensitive C library functions such as execve, socket, and open. However, because the /usr/bin/env utility can be executed, an attacker can run the env -i python command. The -i flag clears all environment variables, including LD PRELOAD, which removes the sandbox.so hook. This allows the newly spawned Python process to execute natively, resulting in unrestricted Remote Code Execution (RCE) and network access.

Recommendations Update to version 2.8.0.

Fix

Protection Mechanism Failure

OS Command Injection

Weakness Enumeration

CWE-693

CWE-78

Related Identifiers

CVE-2026-39420

Affected Products

Maxkb

References · 7

• https://github.com/1Panel-dev/MaxKB/commit/2d17b08e6b060329803754a05e806d0ddecf3fa8 · Patch
• https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-7wgv-v2r3-7f7w · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-39420 · Security Note
• https://github.com/1Panel-dev/MaxKB/releases/tag/v2.8.0 · Note
• https://twitter.com/VulmonFeeds/status/2043990705203220527 · Twitter Post
• https://twitter.com/CVEarity/status/2044089978863718803 · Twitter Post
• https://twitter.com/CVEnew/status/2043976153652728191 · Twitter Post