{"data":{"id":"d096f6d4-3693-4204-9496-a3edba3e5197","title":"CVE-2024-56137: MaxKB, which stands for Max Knowledge Base, is an open source knowledge base question-answering system based on a large…","summary":"CVE-2024-56137 affects MaxKB, an open source knowledge base question-answering system built on a large language model and retrieval-augmented generation (RAG). Versions prior to 1.9.0 contain a remote command execution flaw in the function library module that lets privileged users run OS commands through custom scripts. The vulnerability is tracked as CWE-78 and was reported by GitHub, Inc.","solution":"Fixed in v1.9.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-56137","publishedAt":"2025-01-02T15:15:24.283Z","cveId":"CVE-2024-56137","cweIds":["CWE-78"],"cvssScore":"6.8","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["MaxKB"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"MaxKB remote command execution in function library custom scripts","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00808,"epssCheckedAt":"2026-11-04T18:09:13.386Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T00:11:06.429Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null,"fixes":[]}}