LLMHigh
CVE-2025-32383: MaxKB (Max Knowledge Base) is an open source knowledge base question-answering system based on a lar…
- Occurred
- Apr 10, 2025
- Published
- Apr 10, 2025
- Source
- NVD CVE
Summary
MaxKB (Max Knowledge Base) is an open source knowledge base question-answering system based on a large language model and retrieval-augmented generation (RAG). A reverse shell vulnerability exists in the module of function library. The vulnerability allow privileged users to create a reverse shell. This vulnerability is fixed in v1.10.4-lts.
Tags
- CVE
- CVE-2025-32383
- cvss:MEDIUM
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: CVE describes a reverse shell vulnerability in an LLM-based RAG system, enabling unauthorized access.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8