CVE-2026-79919: MaxKB function-library sandbox escape: dlopen stack-check bypass via importlib meta-path callbacks and unhooked dlsym(RTLD_NEXT)
MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, function-library code running under the LDPRELOAD sandbox can invoke ctypes.CDLL from an importlib.abc.MetaPathFinder callback so the dlopen call-stack heuristic sees a Python import frame, then use unhooked dlsym with RTLDNEXT to resolve glibc's real syscall and bypass the sandbox syscall blacklist. An authenticated workspace member can consequently read or write files, execute processes, or access networks as the sandbox user. This issue is fixed in version 2.10.6-lts.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
MaxKB function-library sandbox escapeto a version that resolves this vulnerability.Fixed in 2.10.6-lts
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated MaxKB workspace member can exploit it through function-library code. The resulting actions run with the privileges of the sandbox user.
Are default deployments affected?
The issue applies to MaxKB deployments where function-library code runs under the LD_PRELOAD sandbox. The provided information does not state whether this capability is enabled or exposed by default.
What can a successful attacker do?
An attacker can bypass the sandbox syscall blacklist and read or write files, execute processes, or access networks as the sandbox user.
What version fixes the issue?
The issue is fixed in MaxKB version 2.10.6-lts. Versions prior to 2.10.6-lts are affected according to the advisory.