Skip to content
Submit incident
AII-1002-59773
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.

MaxKB RCE vulnerability in function library (CVE-2024-56137)

A Remote Command Execution vulnerability in MaxKB's function library module allowed privileged users to execute operating system commands in custom scripts. The vulnerability affected versions prior to v1.9.0 and was patched in that release.

2 January 2025 · 1Panel-dev · Security and cyberattacks
2 January 2025

Drafted by Raidu Incident Detection, an automated system.

AII-1002-59773View source ↗
Quick facts
Category
Security and cyberattacks
Source
github.com
Date
2 January 2025
Drafted by
Raidu Incident Detection

What happened

A Remote Command Execution vulnerability was discovered in MaxKB's function library module, affecting versions prior to v1.9.0. The vulnerability allows privileged users to execute operating system commands in custom scripts.

Reported impact

The vulnerability allows privileged users to execute OS commands, with potential impact on confidentiality, integrity, and availability of systems running affected versions.

Index analysis

The CVSS v3.1 score of 6.8 (Moderate severity) reflects high privileges required for exploitation and required user interaction. Attack vector is network-based with low attack complexity.

Governance controls

The vulnerability was fixed in version v1.9.0, with the system returning 'Permission denied' after patching.

Classification

Category
Security and cyberattacks
Harm status
Potential harm
Intent
Unknown
Timing
Unknown
AI systems
MaxKB

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

github.com
https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-76w2-2g72-cg85