CVE-2025-53927: MaxKB sandbox bypass
Vulnerability summary
CVE-2025-53927 is a medium (CVSS 6.3) Improper Control of Generation of Code vulnerability in 1panel-dev maxkb. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 18.9% of scored vulnerabilities. 1 public exploit is recorded.
Not severe (CVSS 4.6, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Timeline
- 17-07-2025PublishedVulnerability first disclosed.
- 17-07-2025Last modifiedVulnerability information updated.
Description
MaxKB is an open-source AI assistant for enterprise. Prior to version 2.0.0, the sandbox design rules can be bypassed because MaxKB only restricts the execution permissions of files in a specific directory. Therefore, an attacker can use the `shutil.copy2` method in Python to copy the command they want to execute to the executable directory. This bypasses directory restrictions and reverse shell. Version 2.0.0 fixes the issue.
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA4.6MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:LDiffers
EPSS trend
Probability
0.27%
Chance of exploitation in the next 30 days
Percentile
19%
Versus all other CVEs
30-day change
Increase +0.04 pp
From 0.23% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundMaxkb
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, low-privilege account, user interaction (CVSS vector). Other conditions: not stated in public data.
1panel-dev1 product
- maxkb< 2.0.0
Maxkb1 product
- maxkb< 2.0.0
2 vendors · 2 products
References
2 links- github.com/1Panel-dev/MaxKB/security/advisories/GHSA-5xhm-4j3v-87m4X Refsource CONFIRMExploitVendor Advisory