CVE-2026-39421

MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a sandbox escape vulnerability in the ToolExecutor component. By leveraging Python's ctypes library to execute raw system calls, an authenticated attacker with workspace privileges can bypass the LD_PRELOAD-based sandbox.so module to achieve arbitrary code execution via direct kernel system calls, enabling full network exfiltration and container compromise. The library intercepts critical standard system functions such as execve, system, connect, and open. It also intercepts mprotect to prevent PROT_EXEC (executable memory) allocations within the sandboxed Python processes, but pkey_mprotect is not blocked. This issue has been fixed in version 2.8.0.

• CWE-94
• CWE-693

• https://github.com/1Panel-dev/MaxKB/commit/479701a4d2e6059506bad0057a66bed91abb5aefPatch
• https://github.com/1Panel-dev/MaxKB/releases/tag/v2.8.0Release Notes
• https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-9c6w-j7w5-3gf7Vendor Advisory

Published

Apr 14, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-39416AIL framework is an open-source platform to collect, crawl, …6.1
• CVE-2026-39417MaxKB is an open-source AI assistant for enterprise. Version…5.5
• CVE-2026-39418MaxKB is an open-source AI assistant for enterprise. In vers…7.4
• CVE-2026-39419MaxKB is an open-source AI assistant for enterprise. In vers…3.1
• CVE-2026-3942Incorrect security UI in PictureInPicture in Google Chrome p…4.3
• CVE-2026-39420MaxKB is an open-source AI assistant for enterprise. In vers…7.4
• CVE-2026-39422MaxKB is an open-source AI assistant for enterprise. Version…5.4
• CVE-2026-39423MaxKB is an open-source AI assistant for enterprise. Version…5.4
• CVE-2026-39424MaxKB is an open-source AI assistant for enterprise. In vers…4.7
• CVE-2026-39425MaxKB is an open-source AI assistant for enterprise. Version…5.4
• CVE-2026-39426MaxKB is an open-source AI assistant for enterprise. Version…5.4
• CVE-2026-39428CubeCart is an ecommerce software solution. Prior to 6.6.0, …4.8