Reverse Shell Vulnerability in MaxKB Knowledge Base by 1Panel

CVE-2025-32383

Summary

A reverse shell vulnerability has been identified in MaxKB, an open-source knowledge base system that utilizes a large language model and retrieval-augmented generation (RAG). This vulnerability can be exploited by privileged users to create a reverse shell, potentially allowing remote access to the system. The issue is rectified in version 1.10.4-lts, and it is crucial for administrators to upgrade to this version to mitigate the risk associated with this vulnerability.

References