MaxKB

Enhancements

• Knowledge Base: Special characters such as , /, ?, *, and [] are now disallowed when renaming documents.
• Agent: A confirmation prompt is now shown when deleting conversation history, to prevent accidental deletion.
• Q&A Page: Tables in AI responses now support horizontal scrolling when the number of columns exceeds the visible width.

Bug Fixes

• Agent: Fixed an issue where content wrapped in html_render tags was rendered blank when exported to PDF or image (#7222).
• Agent: Fixed an issue where long-term memory could be saved without specifying a trigger interval in scheduled trigger mode.
• Agent: Fixed incorrect field name labels in the long-term memory settings panel.
• Agent: Fixed an issue where, when adding agents created at nearly the same time as skills in an AI conversation node, only one of them took effect.
• Agent: Fixed an issue where the execution details of workflow tools were displayed in the wrong order in conversation records (#7221).
• Agent: Fixed an issue where using the long-form writing agent template from Template Center resulted in a "conversation does not exist" error during chat.
• Agent: Fixed an issue where clicking the like or dislike button below an answer caused a system error.
• Agent: Fixed an issue where, after selecting a tool in an MCP node, parameters not marked as required were all treated as required.
• Agent: Visibility rules for user input parameters — optional parameters now filter out unavailable parameters from global variables (#7224).
• Trigger: Fixed an issue where scheduled trigger tasks did not execute and a backend error occurred when saving.
• Knowledge Base: Fixed an issue where, after importing a PDF containing images, the image links were parsed but the images were not displayed.
• Knowledge Base: Fixed an issue where importing large documents into a general knowledge base failed (#7062).
• Knowledge Base: Fixed an issue where the tools bundled with a Template Center template became unavailable after the template was applied in a workflow knowledge base (#7302).
• Knowledge Base: Fixed an issue where full-text search only returned content that exactly matched the keyword (#7234).

Security Fixes

• Security: Fixed a vulnerability where the signing key for Celery task messages could be derived, leading to remote code execution (NVDB-CAIVD-2026894112).
• Security: Fixed a missing function-level authorization (BFLA) vulnerability in the admin oss/get_url endpoint, which could lead to unauthorized access and SSRF (NVDB-CAIVD-2026080673).
• Security: Fixed a vulnerability where chat_record_id could be used to overwrite other visitors' conversation records (session integrity).
• Security: Fixed a vulnerability where the like and dislike endpoints still accepted cross-client operations.
• Security: Fixed an Eval injection vulnerability in the "Init Param" validation rules of custom tools, which allowed arbitrary JavaScript execution.
• Security: Fixed a path traversal vulnerability in knowledge base names that allowed writing arbitrary .xlsx files and poisoning instance-wide import templates.
• Security: Fixed an account takeover vulnerability.
• Security: Fixed an unauthenticated SSRF vulnerability in the chat file proxy caused by an incomplete host denylist.
• Security: Fixed a vulnerability where the MCP configuration URL was not validated, allowing users with the USER role to perform SSRF against arbitrary addresses and read back responses (direct connection from the web process, bypassing the sandbox).
• Security: Fixed a vulnerability where the login CAPTCHA was not destroyed after successful validation, enabling unauthenticated online password brute-forcing (admin takeover).
• Security: Fixed a vulnerability where authenticated users could access cross-tool execution records through an unscoped cache hit.

Security Vulnerability Fixes

• Security: Fixed a security vulnerability where Chat file uploads could spoof APPLICATION attribution and be read anonymously, allowing content injection into the application namespace.
• Security: Fixed a security vulnerability where document/paragraph migration only validated source knowledge base permissions, leading to cross-tenant content injection and RAG poisoning.
• Security: Fixed a security vulnerability where XLSX embedded image decompression lacked a pixel count limit, allowing authenticated users to trigger memory-exhaustion denial of service (DoS).
• Security: Fixed a security vulnerability where problem/batch_association lacked ownership validation, leading to cross-tenant paragraph content disclosure (IDOR).
• Security: Fixed a security vulnerability where the anonymous application profile endpoint over-serialized data, causing sensitive configuration disclosure (/chat/api/application/profile).
• Security: Fixed a security vulnerability where the password reset verification code endpoint lacked a guessing attempt limit, allowing unauthorized account takeover.
• Security: Fixed a security vulnerability where the function library sandbox could be bypassed (dlopen stack check bypassable + dlsym(RTLD_NEXT) not intercepted) (CVE-2026-79919).
• Security: Fixed a security vulnerability where Python's support for file descriptor form os.execve(fd,...) could be leveraged to enter the libc fexecve call path, causing sandbox bypass (NVDB-CAIVD-2026208648).
• Security: Fixed a security vulnerability where guest session ownership validation was missing, leading to cross-guest-session writes (Session Integrity Violation).
• Security: Fixed a security vulnerability where the default hardcoded Django SECRET_KEY allowed signed tokens to be forged offline, resulting in unauthorized file access.

New Features

• Workflow Default Model Settings In the MaxKB v2.10.6 LTS community edition, workflow default model settings have been introduced for agent workflows, knowledge base workflows, and workflow tools. Previously, multi-AI-node workflows required opening each node individually to modify model configurations, which was relatively cumbersome. Now, a single configuration takes effect globally, significantly reducing maintenance costs and improving the consistency and efficiency of batch model switching. Core features of the default model settings include:
• A workflow-level default model configuration entry;
• Newly created nodes automatically inherit the default model;
• Nodes support flexible model selection modes (Default / Custom / Reference Variable, depending on node type);
• The default model can be applied to all nodes with one click, uniformly switching all nodes' model sources to the default model;
• A single change to the default model takes effect across multiple nodes;
• Configuration completeness is ensured before publishing.
• Tencent Hunyuan & Tencent Cloud Providers Merged into the New "Tencent Cloud" Provider (Integrated with Tencent Cloud TokenHub) Due to adjustments by Tencent Cloud, in the MaxKB v2.10.6 LTS community edition, the Tencent Hunyuan and Tencent Cloud providers have been merged into a new "Tencent Cloud" provider. All models previously configured based on the Tencent Hunyuan or legacy Tencent Cloud provider integration will no longer be usable after the upgrade. After upgrading, please go to the "Model Providers" page, select "Tencent Cloud" from the provider list, and reconfigure your model access information according to the TokenHub integration requirements. Once configured, the models will be available again. Feature Optimizations
• Knowledge Base: The knowledge base/document list selector now supports search when migrating documents/paragraphs.
• Agent: The knowledge base component in the user input area now supports search.
• Agent: In the "Add to Knowledge Base" feature on the conversation log page, the knowledge base and documen

Bug Fixes

• Security Vulnerability: Fixed flaws in permission verification to block a high-risk privilege escalation vulnerability where anonymous application session tokens could be exploited to obtain the administrator's system API Key.
• Knowledge Base: Fixed garbled paragraph content when uploading PDF files where the title text is identical to the body content.

Security Vulnerability Fixes

• Security Vulnerability: Fixed missing‑owner‑check at chat‑sharing link endpoint, where chat tokens could be abused to share other users’ conversation content.
• Security Vulnerability: Fixed privilege escalation allowing regular users to fetch user information of other workspaces via API (#6576).
• Security Vulnerability: Fixed privilege escalation where any user’s API Key could be used to delete arbitrary files.
• Security Vulnerability: Fixed the issue that regular users could obtain sensitive information such as other users’ email addresses via API (#6577).

Bug Fixes

• Knowledge Base: Fixed failure‑to‑load issue for images returned from knowledge bases within conversations.
• Knowledge Base: Fixed abnormal paragraph content when uploaded PDF contains identical text in titles and body content (#6543).
• Knowledge Base: Fixed incorrect display of the “Allow preview in knowledge source” option in the web‑knowledge‑base import‑document modal.
• Agent: Fixed truncated content when copying long conversation text (#6568).
• Agent: Fixed inaccessible AI‑generated images when agent is embedded in third‑party pages.
• Agent: Fixed inaccessible images generated by the agent image‑generation node.
• Agent: Fixed error popup after agent debugging completes, which blocked access to execution details.
• Agent: Fixed basic agents being able to run retrieval against unpublished knowledge‑base retrieval configurations (#6519).
• Agent: Fixed image‑loading failure after images are extracted by the file‑content‑extraction node.
• Agent: Fixed execution failures of agent trigger tasks.
• Agent: Fixed workflow‑tool‑node outputs not being written into conversation logs.
• Agent: Fixed failure of the sendMessage method in agent opening remarks to pass user parameters, causing loss of user questions.
• Agent: Fixed file preview/download failures caused by insufficient permissions in knowledge‑source panel on Q&A page.
• Agent: Fixed permission‑denied prompts for partial files when downloading multiple uploaded files from conversation logs.
• Agent: Fixed inaccurate active‑user statistics on overview page caused by residual uncleaned data after conversation‑log cleanup.
• Role (X‑Pack): Fixed missing permission‑bit controls for certain functions.
• Shared Resources (X‑Pack): Fixed wrong page redirection when system administrators click “Upload Document” inside shared knowledge bases.
• Shared Resources (X‑Pack): Fixed access to hit‑test results for shared knowledge bases within workspaces.