Vulnerability Details CVE-2025-32383
MaxKB (Max Knowledge Base) is an open source knowledge base question-answering system based on a large language model and retrieval-augmented generation (RAG). A reverse shell vulnerability exists in the module of function library. The vulnerability allow privileged users to create a reverse shell. This vulnerability is fixed in v1.10.4-lts.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 15.7%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2025-32383
-
cpe:2.3:a:maxkb:maxkb:1.10.0
-
cpe:2.3:a:maxkb:maxkb:1.10.1
-
cpe:2.3:a:maxkb:maxkb:1.10.2
-
cpe:2.3:a:maxkb:maxkb:1.10.3