Submit #647589: 1Panel-dev MaxKB 2.0.2, 2.1.0 Deserialization

MaxKB is an open-source AI assistant for enterprise. A RCE vulnerability exists in the tool/debug endpoint.

• Source: ⚠️ https://zealous-brand-b4a.notion.site/MaxKB-2-1-0-tool-debug-RCE-2647244a828c80e7850dc6503061b88b
• User: zgbsm (UID 57268)
• Submission: 09/04/2025 09:02 (10 months ago)
• Moderation: 09/14/2025 12:24 (10 days later)
• Status: Accepted
• VulDB entry: 323867 [1Panel-dev MaxKB up to 2.0.2/2.1.0 debug code deserialization]
• Points: 11