CVE-2026-79919

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-79919
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-79919.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-79919
Aliases
  • GHSA-6h35-c779-4v37
Published
2026-09-21T20:48:02Z
Modified
2026-09-24T08:34:25Z
Severity
  • 6.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
MaxKB function-library sandbox escape: dlopen stack-check bypass via importlib meta-path callbacks and unhooked dlsym(RTLD_NEXT)
Details

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, function-library code running under the LD_PRELOAD sandbox can invoke ctypes.CDLL from an importlib.abc.MetaPathFinder callback so the dlopen call-stack heuristic sees a Python import frame, then use unhooked dlsym with RTLD_NEXT to resolve glibc's real syscall and bypass the sandbox syscall blacklist. An authenticated workspace member can consequently read or write files, execute processes, or access networks as the sandbox user. This issue is fixed in version 2.10.6-lts.

Database specific 
{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-693"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/79xxx/CVE-2026-79919.json"
}
References

Affected packages

Git / github.com/1panel-dev/maxkb

Affected ranges

Type
GIT
Repo
https://github.com/1panel-dev/maxkb
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d4bd22af8ba14a9dea317f9034332fec4e964697
Fixed
9d6a5df3c9e500fdc8209b76c68ea96822f552a9
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "2.10.6-lts"
        }
    ],
    "source":  [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

v0.*
v0.9.0
v0.9.1
v1.*
v1.0.0
v1.0.1
v1.1.0
v1.1.1
v1.1.2
v1.1.3
v1.10.0-lts
v1.10.1-lts
v1.10.2-lts
v1.10.3-lts
v1.10.4-lts
v1.2.0
v1.2.1
v1.3.0
v1.4.0
v1.5.0
v1.6.0
v1.6.1
v1.7.0
v1.9.0
v2.*
v2.0.0
v2.0.1
v2.0.2
v2.1.0
v2.10.0-lts
v2.10.1-lts
v2.10.3-lts
v2.10.5-lts
v2.2.0
v2.3.0
v2.4.0
v2.5.0
v2.6.0
v2.6.1
v2.7.0
v2.8.0
v2.8.1
v2.9.0
v2.9.1
v2.9.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-79919.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "73534474147811913719248912019428113298",
            "length":  411
        },
        "id":  "CVE-2026-79919-072f27c7",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/1panel-dev/maxkb/commit/d4bd22af8ba14a9dea317f9034332fec4e964697",
        "target":  {
            "file":  "installer/sandbox.c",
            "function":  "called_from_python_import"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "124260591789369294737308990368605904172",
            "length":  853
        },
        "id":  "CVE-2026-79919-2fcb83dc",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/1panel-dev/maxkb/commit/d4bd22af8ba14a9dea317f9034332fec4e964697",
        "target":  {
            "file":  "installer/sandbox.c",
            "function":  "is_allow_dl"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "28441625670804943747710428586838152865",
                "273823409027846753013300978280197072139",
                "243836854874132218874729208458962276938",
                "20876914006438856946841116668361369374",
                "318122752048207789751121775370783301613",
                "325539201511719075364812190396181450780",
                "258101931138697082192698874307393975121",
                "92852214237092612763908071254706971141",
                "15587103193028875916472258378008043727",
                "58783854833474952900545374446105973032",
                "166397863531243825479070017414934989252",
                "243755226202521114884883129314620457132",
                "122995568163765482585347620440254423030",
                "88301430375655404258584650619524445739",
                "312318794826216749714288173098631840491",
                "316243286602758941339102005960022835925",
                "302324459946374692425663046733786564080",
                "172869168337466722332862856837879167437",
                "240054501045038418813126261795782780697",
                "45100500883795811430047571449277704971",
                "195191360464901612924124331461737867233",
                "118326878109520100275587533367270835534"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-79919-43557878",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/1panel-dev/maxkb/commit/d4bd22af8ba14a9dea317f9034332fec4e964697",
        "target":  {
            "file":  "installer/sandbox.c"
        }
    }
]
vanir_signatures_modified 
"2026-09-24T08:34:25Z"