# 1Panel-dev MaxKB.

Every CVE that names 1Panel-dev MaxKB among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [MaxKB function-library sandbox escape: dlopen stack-check bypass via importlib meta-path callbacks and unhooked dlsym(RTLD_NEXT)](https://agentprime.io/advisories/CVE-2026-79919.md)
  `CVE-2026-79919` · CVE record: 1Panel-dev MaxKB · CVSS 6.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: CWE-693
- [MaxKB: Sandbox escape via unhooked fexecve](https://agentprime.io/advisories/CVE-2026-79918.md)
  `CVE-2026-79918` · CVE record: 1Panel-dev MaxKB · CVSS 6.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: CWE-693
- [MaxKB cross-knowledge IDOR lets a normal user read and modify documents and paragraphs in another knowledge base](https://agentprime.io/advisories/CVE-2026-77517.md)
  `CVE-2026-77517` · CVE record: 1Panel-dev MaxKB · CVSS 5.4 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Broken access control
- [MaxKB: Prompt-injectable agent can lead to command execution](https://agentprime.io/advisories/CVE-2026-77521.md)
  `CVE-2026-77521` · CVE record: 1Panel-dev MaxKB · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Command injection, Privilege escalation, CWE-749
- [MaxKB: Authenticated full-read SSRF via the knowledge web-document import/sync crawler (Fork.fork requests.get, no internal-IP guard, non-blind)](https://agentprime.io/advisories/CVE-2026-77522.md)
  `CVE-2026-77522` · CVE record: 1Panel-dev MaxKB · CVSS 4.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [MaxKB: Chat share-link endpoint missing owner check: a chat token can publish another user's conversation](https://agentprime.io/advisories/CVE-2026-79917.md)
  `CVE-2026-79917` · CVE record: 1Panel-dev MaxKB · CVSS 6.5 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Broken access control
- [MaxKB: Missing per-tool authorization in the agent and workflow tool-dispatch path](https://agentprime.io/advisories/CVE-2026-77516.md)
  `CVE-2026-77516` · CVE record: 1Panel-dev MaxKB · CVSS 5.4 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Broken access control
- [MaxKB: Cross-workspace model parameter form write](https://agentprime.io/advisories/CVE-2026-77523.md)
  `CVE-2026-77523` · CVE record: 1Panel-dev MaxKB · CVSS 7.4 High · Not analysed yet · Published 21 Sept 2026 · Tags: Broken access control
- [MaxKB: Management chat-record routes trust path application_id but load ChatRecord by global chat_id](https://agentprime.io/advisories/CVE-2026-77525.md)
  `CVE-2026-77525` · CVE record: 1Panel-dev MaxKB · CVSS 4.2 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Broken access control
- [MaxKB: Known MCP tool IDs expose owner Tool.code and can be referenced by attacker workflows](https://agentprime.io/advisories/CVE-2026-77518.md)
  `CVE-2026-77518` · CVE record: 1Panel-dev MaxKB · CVSS 5.0 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Broken access control
- [MaxKB AWS Bedrock model credential injection leads to remote code execution](https://agentprime.io/advisories/CVE-2026-79916.md)
  `CVE-2026-79916` · CVE record: 1Panel-dev MaxKB · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Command injection
- [MaxKB: Homepage ranking leaks application IDs that workflow application-nodes can use to invoke another user's application](https://agentprime.io/advisories/CVE-2026-77520.md)
  `CVE-2026-77520` · CVE record: 1Panel-dev MaxKB · CVSS 5.4 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Broken access control
- [MaxKB: Expired application API keys remain usable on \`/chat/api/mcp\`](https://agentprime.io/advisories/CVE-2026-77519.md)
  `CVE-2026-77519` · CVE record: 1Panel-dev MaxKB · CVSS 5.4 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Authentication bypass
- [MaxKB: UpdateStoreTool fetches caller-supplied app-store URLs without host validation](https://agentprime.io/advisories/CVE-2026-64870.md)
  `CVE-2026-64870` · CVE record: 1Panel-dev MaxKB · CVSS 5.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [MaxKB MCP tool import validation bypass allows post-authentication remote code execution](https://agentprime.io/advisories/CVE-2026-54149.md)
  `CVE-2026-54149` · CVE record: 1Panel-dev MaxKB · CVSS 8.8 High · Not analysed yet · Published 10 Jul 2026 · Tags: Command injection
- [MaxKB < 2.10.0 - Server-Side Request Forgery via downloadCallbackUrl and download_url Parameters](https://agentprime.io/advisories/CVE-2026-56779.md)
  `CVE-2026-56779` · CVE record: 1Panel-dev MaxKB · CVSS 5.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [MaxKB: SSRF Bypass via DNS Rebinding in MaxKB OSS URL Fetch](https://agentprime.io/advisories/CVE-2026-42336.md)
  `CVE-2026-42336` · CVE record: 1Panel-dev MaxKB · CVSS 5.1 Medium · Not analysed yet · Published 26 May 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [MaxKB: Broken Access Control in MaxKB OSS URL Fetch API](https://agentprime.io/advisories/CVE-2026-42337.md)
  `CVE-2026-42337` · CVE record: 1Panel-dev MaxKB · CVSS 5.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: Broken access control
- [MaxKB: Webhook Trigger Authentication Bypass](https://agentprime.io/advisories/CVE-2026-44847.md)
  `CVE-2026-44847` · CVE record: 1Panel-dev MaxKB · CVSS 7.5 High · Not analysed yet · Published 26 May 2026 · Tags: Authentication bypass
- [MaxKB: Unauthenticated SSRF via Workflow Template Import](https://agentprime.io/advisories/CVE-2026-45412.md)
  `CVE-2026-45412` · CVE record: 1Panel-dev MaxKB · CVSS 6.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: Server-side request forgery (SSRF)
- [MaxKB: Unsalted MD5 Password Hashing](https://agentprime.io/advisories/CVE-2026-45413.md)
  `CVE-2026-45413` · CVE record: 1Panel-dev MaxKB · CVSS 6.9 Medium · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS
- [MaxKB: SSRF Bypass in MaxKB OSS URL Fetch due to URL Parsing Discrepancy](https://agentprime.io/advisories/CVE-2026-42335.md)
  `CVE-2026-42335` · CVE record: 1Panel-dev MaxKB · CVSS 6.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: Server-side request forgery (SSRF)
- [MaxKB: Stored XSS via Unsanitized iframe_render Parsing](https://agentprime.io/advisories/CVE-2026-39426.md)
  `CVE-2026-39426` · CVE record: 1Panel-dev MaxKB · CVSS 5.1 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Cross-site scripting (XSS)
- [MaxKB: Stored XSS via Unsanitized html_rander Tags in Markdown Rendering](https://agentprime.io/advisories/CVE-2026-39425.md)
  `CVE-2026-39425` · CVE record: 1Panel-dev MaxKB · CVSS 5.1 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Cross-site scripting (XSS)
- [MaxKB: Sandbox Result Validation Bypass via Tool Output Spoofing](https://agentprime.io/advisories/CVE-2026-39419.md)
  `CVE-2026-39419` · CVE record: 1Panel-dev MaxKB · CVSS 3.1 Low · Not analysed yet · Published 14 Apr 2026 · Tags: Other injection, Authentication bypass, CWE-693
- [MaxKB has CSV Injection in its Application Chat Export Functionality](https://agentprime.io/advisories/CVE-2026-39424.md)
  `CVE-2026-39424` · CVE record: 1Panel-dev MaxKB · CVSS 5.3 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Other injection
- [Stored XSS via Eval Injection in EchartsRander Component](https://agentprime.io/advisories/CVE-2026-39423.md)
  `CVE-2026-39423` · CVE record: 1Panel-dev MaxKB · CVSS 6.9 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Cross-site scripting (XSS), Code injection
- [MaxKB has Stored XSS via ChatHeadersMiddleware](https://agentprime.io/advisories/CVE-2026-39422.md)
  `CVE-2026-39422` · CVE record: 1Panel-dev MaxKB · CVSS 6.9 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Cross-site scripting (XSS)
- [MaxKB: Sandbox escape via ctypes and unhooked SYS_pkey_mprotect](https://agentprime.io/advisories/CVE-2026-39421.md)
  `CVE-2026-39421` · CVE record: 1Panel-dev MaxKB · CVSS 6.3 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Code injection, CWE-693
- [MaxKB: Sandbox escape via LD_PRELOAD bypass](https://agentprime.io/advisories/CVE-2026-39420.md)
  `CVE-2026-39420` · CVE record: 1Panel-dev MaxKB · CVSS 6.3 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Command injection, CWE-693
- [MaxKB: SSRF via sandbox network hook bypass](https://agentprime.io/advisories/CVE-2026-39418.md)
  `CVE-2026-39418` · CVE record: 1Panel-dev MaxKB · CVSS 5.0 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [MaxKB: RCE via MCP stdio command injection in workflow engine](https://agentprime.io/advisories/CVE-2026-39417.md)
  `CVE-2026-39417` · CVE record: 1Panel-dev MaxKB · CVSS 4.6 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Command injection, CWE-20
- [1Panel-dev MaxKB MdPreview chat.ts cross site scripting](https://agentprime.io/advisories/CVE-2025-15632.md)
  `CVE-2025-15632` · CVE record: 1Panel-dev MaxKB · CVSS 5.1 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: Cross-site scripting (XSS), Code injection
- [1Panel-dev MaxKB Model Context Protocol Node base_mcp_node.py execute os command injection](https://agentprime.io/advisories/CVE-2026-6108.md)
  `CVE-2026-6108` · CVE record: 1Panel-dev MaxKB · CVSS 5.3 Medium · Not analysed yet · Published 12 Apr 2026 · Tags: Command injection
- [1Panel-dev MaxKB ChatHeadersMiddleware chat_headers_middleware.py cross site scripting](https://agentprime.io/advisories/CVE-2026-6107.md)
  `CVE-2026-6107` · CVE record: 1Panel-dev MaxKB · CVSS 5.1 Medium · Not analysed yet · Published 12 Apr 2026 · Tags: Cross-site scripting (XSS), Code injection
- [1Panel-dev MaxKB Public Chat static_headers_middleware.py StaticHeadersMiddleware cross site scripting](https://agentprime.io/advisories/CVE-2026-6106.md)
  `CVE-2026-6106` · CVE record: 1Panel-dev MaxKB · CVSS 5.1 Medium · Not analysed yet · Published 11 Apr 2026 · Tags: Cross-site scripting (XSS), Code injection
- [MaxKB has a Python sandbox LD_PRELOAD bypass](https://agentprime.io/advisories/CVE-2025-66446.md)
  `CVE-2025-66446` · CVE record: 1Panel-dev MaxKB · CVSS 8.8 High · Not analysed yet · Published 11 Dec 2025 · Tags: Race condition
- [MaxKB vulnerable to privilege escalation through sandbox bypass](https://agentprime.io/advisories/CVE-2025-66419.md)
  `CVE-2025-66419` · CVE record: 1Panel-dev MaxKB · CVSS 8.8 High · Not analysed yet · Published 11 Dec 2025 · Tags: Race condition
- [MaxKB has Information Leak in sandbox](https://agentprime.io/advisories/CVE-2025-64703.md)
  `CVE-2025-64703` · CVE record: 1Panel-dev MaxKB · CVSS 6.3 Medium · Not analysed yet · Published 13 Nov 2025 · Tags: Information disclosure
- [MaxKB has SSRF in sandbox](https://agentprime.io/advisories/CVE-2025-64511.md)
  `CVE-2025-64511` · CVE record: 1Panel-dev MaxKB · CVSS 7.4 High · Not analysed yet · Published 13 Nov 2025 · Tags: Server-side request forgery (SSRF)
- [1Panel-dev MaxKB debug deserialization](https://agentprime.io/advisories/CVE-2025-10433.md)
  `CVE-2025-10433` · CVE record: 1Panel-dev MaxKB · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2025 · Tags: Insecure deserialization, CWE-20
- [MaxKB has RCE in MCP call](https://agentprime.io/advisories/CVE-2025-53928.md)
  `CVE-2025-53928` · CVE record: 1Panel-dev MaxKB · CVSS 4.6 Medium · Not analysed yet · Published 17 Jul 2025 · Tags: Code injection
- [MaxKB sandbox bypass](https://agentprime.io/advisories/CVE-2025-53927.md)
  `CVE-2025-53927` · CVE record: 1Panel-dev MaxKB · CVSS 4.6 Medium · Not analysed yet · Published 17 Jul 2025 · Tags: Code injection
- [MaxKB Python Sandbox Bypass in Function Library](https://agentprime.io/advisories/CVE-2025-48950.md)
  `CVE-2025-48950` · CVE record: 1Panel-dev MaxKB · CVSS 5.8 Medium · Not analysed yet · Published 3 Jun 2025 · Tags: Broken access control
- [1Panel-dev MaxKB Knowledge Base Module csv injection](https://agentprime.io/advisories/CVE-2025-4546.md)
  `CVE-2025-4546` · CVE record: 1Panel-dev MaxKB · CVSS 5.1 Medium · Not analysed yet · Published 11 May 2025 · Tags: Other injection
- [MaxKB has a reverse shell vulnerability in function library](https://agentprime.io/advisories/CVE-2025-32383.md)
  `CVE-2025-32383` · CVE record: 1Panel-dev MaxKB · CVSS 4.3 Medium · Not analysed yet · Published 10 Apr 2025 · Tags: Code injection
- [MaxKB RCE vulnerability in function library](https://agentprime.io/advisories/CVE-2024-56137.md)
  `CVE-2024-56137` · CVE record: 1Panel-dev MaxKB · CVSS 6.8 Medium · Not analysed yet · Published 2 Jan 2025 · Tags: Command injection

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=1panel-dev-maxkb>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/1panel-dev-maxkb/>. Everything for agents: <https://agentprime.io/llms.txt>.