Is there a public PoC exploit available for CVE-2026-6108?

Yes, a public proof-of-concept exploit is available for CVE-2026-6108. Prioritise patching immediately. EPSS: 0.2%.

Maxkb CVE-2026-6108

Q: What is the CVSS score of CVE-2026-6108?

CVE-2026-6108 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-21690 LOW

OS Command Injection (CWE-78)

2026-04-12 VulDB

Command Injection Maxkb

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

5.3 (MEDIUM) 2.1 (LOW)

PoC Detected

Apr 29, 2026 - 01:00 vuln.today

Public exploit code

CVSS changed

Apr 12, 2026 - 01:22 NVD

6.3 (MEDIUM) 5.3 (MEDIUM)

Analysis Generated

Apr 12, 2026 - 01:17 vuln.today

EUVD ID Assigned

Apr 12, 2026 - 01:15 euvd

EUVD-2026-21690

Analysis Generated

Apr 12, 2026 - 01:15 vuln.today

CVE Published

Apr 12, 2026 - 01:00 nvd

LOW 2.1

DescriptionCVE.org

A vulnerability was found in 1Panel-dev MaxKB up to 2.6.1. The affected element is the function execute of the file apps/application/flow/step_node/mcp_node/impl/base_mcp_node.py of the component Model Context Protocol Node. Performing a manipulation results in os command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

AnalysisAI

OS command injection in 1Panel-dev MaxKB up to version 2.6.1 allows authenticated remote attackers to execute arbitrary operating system commands through manipulation of the Model Context Protocol Node's execute function in base_mcp_node.py, with publicly available exploit code and vendor-released patches available for remediation.

Technical ContextAI

The vulnerability exists in the Model Context Protocol (MCP) Node implementation within MaxKB's application flow processing layer. The execute() function in apps/application/flow/step_node/mcp_node/impl/base_mcp_node.py fails to properly sanitize user-supplied input before passing it to OS command execution functions, resulting in classic OS command injection (CWE-78). The MCP Node is a component that handles model context protocol interactions, likely used for LLM integration and workflow automation. The affected product MaxKB (versions up to 2.6.1) is identified via CPE cpe:2.3:a:1panel-dev:maxkb:*:*:*:*:*:*:*:* as running on the 1Panel platform framework.

RemediationAI

Upgrade MaxKB to a version released after 2.6.1; the vendor has released patched versions in response to this disclosure. Consult the official 1Panel-dev MaxKB repository and release notes for the specific patched version (typically 2.6.2 or later). Until patching is possible, restrict network access to the MaxKB application and implement authentication controls to limit access to the Model Context Protocol Node feature to trusted users only. The vendor was contacted early in the disclosure process and responded professionally with a rapid fix, so patch availability should not be a blocking factor. Verify the patch through the official 1Panel-dev GitHub repository or vendor advisory channels.