CVE-2025-64703

Publication date

2025-11-13 15:52:44

Family

GitHub_M

State

PUBLISHED

Description

MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can get sensitive informations by Python code in tool module, although the process run in sandbox. Version 2.3.1 fixes the issue.