CVE-2025-48950
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-48950
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-48950.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-48950
- Aliases
-
- GHSA-p2qq-x9j2-px8v
- Published
- 2025-06-03T19:15:39Z
- Modified
- 2025-06-04T16:49:58.567939Z
- Summary
- [none]
- Details
-
MaxKB is an open-source AI assistant for enterprise. Prior to version 1.10.8-lts, Sandbox only restricts the execution permissions of binary files in common directories, such as
/bin,/usr/bin, etc. Therefore, attackers can exploit some files with execution permissions in non blacklisted directories to carry out attacks. Version 1.10.8-lts fixes the issue. - References