Security Vulnerability Fixes
- Security Vulnerability: Fixed the vulnerability where Python code in tools could access local services (CVE-2025-64511);
- Security Vulnerability: Fixed the vulnerability where Python code in tools could obtain system configuration information (CVE-2025-64703).
Special thanks to the XlabAI Team of Tencent Xuanwu Lab (@XlabAITeam) for discovering and promptly feeding back the above vulnerabilities to the MaxKB open-source community!
Feature Optimizations
- System: Through code refactoring and architecture optimization, significantly reduced CPU and memory usage, comprehensively improving system resource utilization, stability, and concurrent processing capabilities;
- System: Displayed the user's name in the upper right corner after the user logs in to the system (#4315);
- Applications: Users authorized with "View" permission can access the "Settings" page of the application;
- Folders: Folders in the application, knowledge base, and tool lists support movement and drag-and-drop movement;
- Folders: Removed the hierarchical limit for folders in the application, knowledge base, and tool lists;
- User Management: Adjusted the maximum length of usernames and full names to 64 characters;
- Conversation Users (X-Pack): Adjusted the maximum length of usernames and full names to 64 characters.
Bug Fixes
- Knowledge Base: Fixed the occasional failure of document vectorization;
- Knowledge Base: Fixed the issue where the association between segments and questions was not synchronously deleted when deleting a document;
- Applications: Fixed the issue where multiple forms were repeatedly displayed in the conversation when there was a form collection node in the loop body (#4326);
- Applications: Fixed the issue where the output content directly displayed the "context" abnormal information during the conversation when there was a form collection node in the loop body;
- Applications: Fixed the issue where the output parameters of the loop node would become "None" when there was a form collection node in the loop body;
- Applications: Fixed the issue where the last folder was not displayed when adding a tool node;
- Resource Authorization: Fixed the issue where the folder would automatically collapse when authorizing resources under the folder;
- Q&A Page: Fixed the issue where users could not log in via WeChat Work QR code on the Safari browser.
Contributors
XlabAITeam