CVE-2026-79919

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.6-lts

Description Function-library code running under the LD PRELOAD sandbox can invoke ctypes.CDLL from an importlib.abc.MetaPathFinder callback. This allows the dlopen call-stack heuristic to identify a Python import frame, enabling the use of unhooked dlsym with RTLD NEXT to resolve glibc's real syscall and bypass the sandbox syscall blacklist. An authenticated workspace member can exploit this to read or write files, execute processes, or access networks as the sandbox user.

Recommendations Update to version 2.10.6-lts.