CVE-2025-53927: MaxKB sandbox bypass
MaxKB is an open-source AI assistant for enterprise. Prior to version 2.0.0, the sandbox design rules can be bypassed because MaxKB only restricts the execution permissions of files in a specific directory. Therefore, an attacker can use the shutil.copy2 method in Python to copy the command they want to execute to the executable directory. This bypasses directory restrictions and reverse shell. Version 2.0.0 fixes the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53927?
CVE-2025-53927 has been classified as a medium severity vulnerability.
How do I fix CVE-2025-53927?
To fix CVE-2025-53927, upgrade to MaxKB version 2.0.0 or later.
What is the impact of CVE-2025-53927?
CVE-2025-53927 allows an attacker to bypass restrictions on executing files by copying them to unauthorized directories.
Which versions of MaxKB are affected by CVE-2025-53927?
CVE-2025-53927 affects all versions of MaxKB prior to 2.0.0.
Is CVE-2025-53927 a remote vulnerability?
CVE-2025-53927 requires local access to the affected MaxKB installation to exploit the vulnerability.