CVE-2026-79918: 1panel-Dev Maxkb

Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days.

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, the ToolExecutor LD_PRELOAD sandbox hooks execve, execvpe, and execveat to prevent subprocess creation but does not hook fexecve. An authenticated attacker able to execute tool code can call fexecve to start a process outside the sandbox's intended subprocess policy. This issue is fixed in version 2.10.6-lts.

Affected products

• 1panel-Dev Maxkb: before 2.10.6-lts (fixed in 2.10.6-lts)

Published 2026-09-21. Last modified 2026-09-24.