A critical OS command injection vulnerability in MaxKB allows unauthenticated remote attackers to execute arbitrary commands with the privileges of the application user.

This vulnerability stems from the SandboxShellBackend component, which fails to properly neutralize special elements used in OS commands and omits necessary human approval for execution tasks. An unauthenticated attacker can supply malicious input through chat or ingested content to trigger command execution outside the intended sandbox environment.

The potential for unauthenticated remote code execution poses a catastrophic risk to the integrity, confidentiality, and availability of the host system. Given the CVSS score of 10.0, this flaw effectively grants an attacker full control over the application environment, which could lead to total data compromise, unauthorized lateral movement within the network, and complete service disruption.

Immediate Action: Update 1Panel-dev MaxKB to version 2.10.5-lts or later immediately to apply the required security patches.

Proactive Monitoring: Monitor application logs for unexpected shell command execution patterns or unauthorized requests directed at chat and ingestion endpoints.

Compensating Controls: Implement strict network segmentation and egress filtering to limit the potential reach of an attacker if code execution is achieved, and utilize a Web Application Firewall to inspect and block suspicious payloads in chat inputs.

Public Exploit Available: No — there is no confirmed public exploit in the available data.

The severity of this vulnerability cannot be overstated given the reach of unauthenticated remote code execution. Organizations running MaxKB must prioritize the update to version 2.10.5-lts as their primary security objective to neutralize this critical risk. Failure to patch will leave the infrastructure exposed to complete takeover by remote adversaries.