Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a sandbox escape vulnerability in the ToolExecutor component. By leveraging Python's ctypes library to execute raw system calls, an authenticated attacker with workspace privileges can bypass the LD_PRELOAD-based sandbox.so module to achieve arbitrary code execution via direct kernel system calls, enabling full network exfiltration and container compromise. The library intercepts critical standard system functions such as execve, system, connect, and open. It also intercepts mprotect to prevent PROT_EXEC (executable memory) allocations within the sandboxed Python processes, but pkey_mprotect is not blocked. This issue has been fixed in version 2.8.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚡ New CVE Alert: CVE-2026-39421 📊 Severity: 6.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-39421 #CVE-2026-39421 #CVE #Medium #CyberSecurity #InfoSec https://t.co/f5VKu6cbjx
Post summary
The tweet announces a new CVE with medium severity but offers no further technical, exploitation, or remediation details.
CVE-2026-39421 Sandbox Escape via ctypes in MaxKB 2.7.1 and Below https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-39421
Post summary
CVE‑2026‑39421 is a sandbox escape vulnerability in MaxKB 2.7.1 and earlier, triggered via ctypes, with no PoC, exploit, patch, or active exploitation evidence presented in this brief notice.
CVE-2026-39421 MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a sandbox escape vulnerability in the ToolExecutor component. By leveraging Pyth… https://www.cve.org/CVERecord?id=CVE-2026-39421
Post summary
The statement announces CVE-2026-39421 as a sandbox escape vulnerability in MaxKB versions 2.7.1 and earlier, but provides no PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | maxkb | maxkb | - | - | - |