| Package | Affected versions | Patched versions |
|---|---|---|
| maxkb | < 2.4.0 | 2.4.0 |
MaxKB is an open-source AI assistant for enterprise. Versions 2.3.1 and below have improper file permissions which allow attackers to overwrite the built-in dynamic linker and other critical files, potentially resulting in privilege escalation. This issue is fixed in version 2.4.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free