PT-2026-32575 · 1Panel Dev · Maxkb

Liqiang · Published 2026-04-14 · Updated 2026-04-14 · CVE-2026-39421

NVD

CVSS v3.1

6.3

Medium

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a sandbox escape vulnerability in the ToolExecutor component. By leveraging Python's ctypes library to execute raw system calls, an authenticated attacker with workspace privileges can bypass the LD PRELOAD-based sandbox.so module to achieve arbitrary code execution via direct kernel system calls, enabling full network exfiltration and container compromise. The library intercepts critical standard system functions such as execve, system, connect, and open. It also intercepts mprotect to prevent PROT EXEC (executable memory) allocations within the sandboxed Python processes, but pkey mprotect is not blocked. This issue has been fixed in version 2.8.0.

Fix

Protection Mechanism Failure

Code Injection

Weakness Enumeration

CWE-693

CWE-94

Related Identifiers

CVE-2026-39421

Affected Products

Maxkb

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-39421 · Security Note
• https://github.com/1Panel-dev/MaxKB/commit/479701a4d2e6059506bad0057a66bed91abb5aef · Note
• https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-9c6w-j7w5-3gf7 · Note
• https://github.com/1Panel-dev/MaxKB/releases/tag/v2.8.0 · Note
• https://twitter.com/CVEnew/status/2043976152646090869 · Twitter Post
• https://twitter.com/CVEarity/status/2044092757426483392 · Twitter Post