CVE-2025-64703: Maxkb

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can get sensitive informations by Python code in tool module, although the process run in sandbox. Version 2.3.1 fixes the issue.

Affected products

• Maxkb Maxkb: before 2.3.1 (fixed in 2.3.1)

Published 2025-11-13. Last modified 2026-10-07.