MaxKB has SSRF in sandbox

The SSRF vulnerability in MaxKB allows an attacker to craft malicious requests that originate from the server itself, effectively bypassing security controls. An attacker could leverage this to scan the internal network for exposed services, attempt to access sensitive data stored in internal databases, or even potentially execute commands on internal systems if those services are vulnerable. The sandbox environment provides some mitigation, but it is not a complete defense against SSRF exploitation. Successful exploitation could lead to data breaches, unauthorized access to internal resources, and potentially compromise the entire enterprise network.

Organizations utilizing MaxKB for AI-powered enterprise applications are at risk, particularly those with internal databases or services accessible via HTTP or other protocols. Environments with weak network segmentation or limited WAF protection are especially vulnerable. Users relying on MaxKB for sensitive data processing should prioritize patching.

• python / server:

import requests
import urllib3

http = urllib3.PoolManager()

def check_ssrf(url):
    try:
        r = http.request('GET', url, timeout=3)
        if r.status == 200:
            print(f"[+] SSRF possible: {url}")
        else:
            print(f"[-] SSRF not detected: {url}")
    except Exception as e:
        print(f"[-] Error checking {url}: {e}")

# Example usage (replace with internal URLs)
check_ssrf('http://localhost:5432')
check_ssrf('http://127.0.0.1:8080')

• generic web:

curl -I http://<maxkb_server>/tool/module?url=http://localhost:5432 | grep HTTP/1.1

1. 2025-11-13Disclosure

   disclosure

1. Reserviert2025-11-05
2. Veröffentlicht2025-11-13
3. EPSS aktualisiert2026-03-23

The primary mitigation for CVE-2025-64511 is to immediately upgrade MaxKB to version 2.3.1 or later. If upgrading is not immediately feasible due to compatibility issues or testing requirements, consider implementing strict network segmentation to isolate MaxKB from sensitive internal resources. Additionally, implement a Web Application Firewall (WAF) with SSRF protection rules to filter outbound requests and block malicious URLs. Regularly review and audit the Python code within the tool module to identify and remediate any potential SSRF vulnerabilities.