CVE-2026-79918

Summary

The flaw allows an authenticated attacker to execute code outside the sandbox by leveraging fexecve, posing a risk to system security.

Exploitability

Exploitation requires authentication and access to tool code execution; moderate effort needed.

Blast radius

If exploited, could lead to unauthorized process execution with potential for data compromise or system control loss.

Prioritized remediation

Update to MaxKB version 2.10.6-lts immediately to mitigate the vulnerability.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.