CVE-2026-79918

Deferred Deferred - Pending Action

Command Injection in MaxKB AI Assistant

Publication date: 2026-09-21

Last updated on: 2026-09-21

Assigner: GitHub, Inc.

Description

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, the ToolExecutor LD_PRELOAD sandbox hooks execve, execvpe, and execveat to prevent subprocess creation but does not hook fexecve. An authenticated attacker able to execute tool code can call fexecve to start a process outside the sandbox's intended subprocess policy. This issue is fixed in version 2.10.6-lts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-21

Last Modified

2026-09-21

Generated

2026-09-22

AI Q&A

2026-09-22

EPSS Evaluated

N/A

NVD

CVE-2026-79918

Affected Vendors & Products

Vendor	Product	Version / Range
maxkb	maxkb	to 2.10.6-lts (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-693	The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Attack-Flow Graph

Executive Summary

This vulnerability affects MaxKB, an open-source AI assistant for enterprises. The issue is in versions prior to 2.10.6-lts, where the ToolExecutor uses LD_PRELOAD sandbox hooks to block subprocess creation via execve, execvpe, and execveat functions. However, it fails to hook fexecve, allowing an authenticated attacker to bypass the sandbox and execute processes outside the intended policy by calling fexecve.

Detection Guidance

Detection involves checking the MaxKB version in use. If your system runs MaxKB versions prior to 2.10.6-lts, it is vulnerable. Verify the installed version by running commands like 'pip show maxkb' or checking the application interface.

Impact Analysis

An authenticated attacker could exploit this to run unauthorized processes on the system hosting MaxKB. This could lead to data exfiltration, privilege escalation, or further compromise of the host environment, depending on the attacker's goals and the system's configuration.

Compliance Impact

This vulnerability could violate compliance requirements such as GDPR or HIPAA by enabling unauthorized code execution, potentially leading to data breaches or loss of control over sensitive data. Organizations using affected versions may face regulatory penalties or reputational damage.

Mitigation Strategies

Upgrade MaxKB to version 2.10.6-lts or later immediately. This version includes the fix for the fexecve sandbox bypass. Follow the official MaxKB upgrade instructions to ensure proper installation.

Hi! I’m here to help you understand CVE-2026-79918. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70