CVE-2025-10433: 1Panel-dev MaxKB debug deserialization
A vulnerability was determined in 1Panel-dev MaxKB up to 2.0.2/2.1.0. This issue affects some unknown processing of the file /admin/api/workspace/default/tool/debug. Executing manipulation of the argument code can lead to deserialization. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.1.1 is capable of addressing this issue. It is suggested to upgrade the affected component.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10433?
CVE-2025-10433 has been classified with a critical severity due to its potential for remote code execution via deserialization.
How do I fix CVE-2025-10433?
To mitigate CVE-2025-10433, upgrade 1Panel-dev MaxKB to versions beyond 2.1.0 where the vulnerability is patched.
What versions are affected by CVE-2025-10433?
CVE-2025-10433 affects 1Panel-dev MaxKB versions up to and including 2.1.0.
Can CVE-2025-10433 be exploited remotely?
Yes, CVE-2025-10433 can be exploited remotely through manipulation of the argument code.
What specific feature of 1Panel-dev MaxKB does CVE-2025-10433 impact?
CVE-2025-10433 impacts the admin API endpoint for debugging tools in 1Panel-dev MaxKB.