CVE-2026-79919 Details
Description
MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, function-library code running under the LD_PRELOAD sandbox can invoke ctypes.CDLL from an importlib.abc.MetaPathFinder callback so the dlopen call-stack heuristic sees a Python import frame, then use unhooked dlsym with RTLD_NEXT to resolve glibc's real syscall and bypass the sandbox syscall blacklist. An authenticated workspace member can consequently read or write files, execute processes, or access networks as the sandbox user. This issue is fixed in version 2.10.6-lts.
A vulnerability in MaxKB, an open-source AI assistant for enterprise, allows authenticated workspace members to bypass the LD_PRELOAD sandbox restrictions. This sandbox is designed to limit privileges and hook certain libc functions to prevent harmful actions. However, prior to version 2.10.6-lts, it was possible to exploit the sandbox by manipulating the import stack through a custom MetaPathFinder. This exploitation involved using unhooked dlsym to access glibc's real syscall functions, effectively bypassing the sandbox's syscall blacklist. As a result, an attacker could read or write files, execute processes, or access networks as the sandbox user. This vulnerability has been patched in version 2.10.6-lts.
Users can upgrade to MaxKB version 2.10.6-lts to address this vulnerability. After upgrading, it's recommended to review and reconfigure any model access information for Tencent Cloud providers, as this integration has changed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 21, 2026CISA-ADP
Assessed Sep 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/1Panel-dev/MaxKB/commit/d4bd22af8ba14a9dea317f9034332fec4e964697 | [email protected] | Source CodeVendor |
| https://github.com/1Panel-dev/MaxKB/releases/tag/v2.10.6-lts | [email protected] | Release NotesVendor |
| https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-6h35-c779-4v37 | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-693 | Protection Mechanism Failure | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| 1Panel-dev MaxKB | <= v2.10.5-lts (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 22, 2026 | CVE Modified | CISA-ADP |
| Sep 21, 2026 | New CVE Received | [email protected] |