CVE-2025-53927CWE-94

MaxKB sandbox bypass

Medium · published July 17, 2025

CVSS v3.1
4.6
EPSS
0%
Percentile
17.9
In the wild
Unconfirmed
What it is

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.0.0, the sandbox design rules can be bypassed because MaxKB only restricts the execution permissions of files in a specific directory. Therefore, an attacker can use the `shutil.copy2` method in Python to copy the command they want to execute to the executable directory. This bypasses directory restrictions and reverse shell. Version 2.0.0 fixes the issue.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00268 · 17.9th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2025-07-17T13:50Z
EPSS history
Timeline
  • 17 JUL 13:50Z
    MaxKB sandbox bypass
    cvelistv5