An Authenticated member of a MaxKB workspace can load a Python import hook that triggers a ctypes.CDLL call. The call bypasses the sandbox’s syscall blacklist by using an unhooked dlsym for RTLD_NEXT, allowing the process to read or write files, execute arbitrary commands and access network resources while running as the sandbox user. The vulnerability is a sandbox escape flaw that permits a local authenticated user to gain elevated privileges within the application environment.

The affected application is MaxKB, developed by 1Panel-dev. Versions prior to 2.10.6-lts are vulnerable. The patch released in the 2.10.6-lts release addresses the flaw.

The CVSS score is 6.3, indicating a moderate severity vulnerability. No EPSS score is available, and the issue is not listed in the CISA KEV catalog. The exploit requires a user to be an authenticated workspace member; therefore the attack surface is limited to legitimate users but still provides significant escalation potential. The vulnerability can be exploited directly inside the sandbox environment, bypassing configured syscall checks.