- Security: Fixed a security vulnerability where Chat file uploads could spoof APPLICATION attribution and be read anonymously, allowing content injection into the application namespace.
- Security: Fixed a security vulnerability where document/paragraph migration only validated source knowledge base permissions, leading to cross-tenant content injection and RAG poisoning.
- Security: Fixed a security vulnerability where XLSX embedded image decompression lacked a pixel count limit, allowing authenticated users to trigger memory-exhaustion denial of service (DoS).
- Security: Fixed a security vulnerability where problem/batchassociation lacked ownership validation, leading to cross-tenant paragraph content disclosure (IDOR).
- Security: Fixed a security vulnerability where the anonymous application profile endpoint over-serialized data, causing sensitive configuration disclosure (/chat/api/application/profile).
- Security: Fixed a security vulnerability where the password reset verification code endpoint lacked a guessing attempt limit, allowing unauthorized account takeover.
MaxKB by FIT2CLOUD (1Panel)
Pulse Score
36 / 100
Rank #106 of 258
GitHub stars
22.9K
about +4 a day
Website rank (Tranco)
#2,053,063
maxkb.cn
Latest release
2.10.6-lts
33d ago
Price
Free
checked Oct 6, 2026
Overview
An open-source platform for building enterprise agents that combines retrieval pipelines, an agentic workflow engine, MCP tool use and multi-model support, commonly used for customer service and internal knowledge bases.
The GitHub repository has 22.9K stars, 225 of them added in the last 30 days. The latest stable release is 2.10.6-lts, published Sep 3, 2026.
MaxKB usage and attention over time
Download the raw daily series: maxkb.csv
Install MaxKB
| Docker | docker pull 1panel/maxkb |
|---|
These commands use the packages tracked on this page. The vendor may recommend a different installer; see the official documentation.
Key facts
| Maker | FIT2CLOUD (1Panel) |
|---|---|
| Type | Open-source enterprise agent and knowledge-base platform |
| First released | September 2023 |
| License | GPL-3.0 |
| Main language | Python |
| Open issues and PRs | 26 |
| Docker Hub pulls | 1,044,885 |
Pricing
Community edition free (GPL-3.0); Professional edition sold as a perpetual licence priced in CNY, Enterprise by quote.
Source: official pricing page, checked Oct 6, 2026. Prices change often; confirm before you buy.
Pulse Score breakdown
Adoption28
Community57
Attention—
Momentum50
Each component is scored 0 to 100 from public signals; a dash means no data for it. Methodology.
MaxKB news and signals
-
101 agents added to AgentGid
DeepSeek Harness, CopilotKit, Orca, eve, ARTEMIS, Jasper, Harvey, Paradox, Eightfold AI Interviewer, TesterArmy e2e, Copy.ai, Consensus and 89 more
What changed: recent MaxKB releases
4 stable releases in the last 90 days · Full changelog
- Security Vulnerability: Fixed flaws in permission verification to block a high-risk privilege escalation vulnerability where anonymous application session tokens could be exploited to obtain the…
- Knowledge Base: Fixed garbled paragraph content when uploading PDF files where the title text is identical to the body content.
- Security Vulnerability: Fixed missing‑owner‑check at chat‑sharing link endpoint, where chat tokens could be abused to share other users’ conversation content.
- Security Vulnerability: Fixed privilege escalation allowing regular users to fetch user information of other workspaces via API (#6576).
- Security Vulnerability: Fixed privilege escalation where any user’s API Key could be used to delete arbitrary files.
- Security Vulnerability: Fixed the issue that regular users could obtain sensitive information such as other users’ email addresses via API (#6577).
- Knowledge Base: Fixed failure‑to‑load issue for images returned from knowledge bases within conversations.
- Knowledge Base: Fixed abnormal paragraph content when uploaded PDF contains identical text in titles and body content (#6543).
- Vulnerability: Fixed a system file permission flaw that allowed anonymous access to resources;
- Vulnerability: Fixed an IDOR vulnerability in admin chat logs which allowed bypassing application path authentication to read cross-application chat records;
- Vulnerability: Added independent authorization verification mechanism for agent and workflow tool scheduling;
- Vulnerability: Fixed missing host validation when UpdateStoreTool fetches external app store URLs;
- Vulnerability: Fixed the horizontal privilege escalation issue that enabled users to access and modify unauthorized documents and segments across knowledge bases;
- Vulnerability: Fixed expired agent API keys being usable at the /chat/api/mcp endpoint;
- Knowledge Base: Added visual progress display for file uploads; files that failed to upload support one-click re-upload.
- Agent: Supported batch configuration for agent conversation log cleanup strategies (#6213).
- Agent (X-Pack): Enabled voice input capability for WeCom robot integration.
- Agent: Optimized copywriting on the overview page to align its visual style with the homepage.
- Role Permissions (X-Pack): Added homepage view permission configuration for regular users and workspace administrators.
- Agent (X-Pack): Fixed the 500 error in conversations caused by multiple agents sharing the same chatsessionid when integrated with WeCom (#6325).
- Q&A Page: Optimized voice input logic to append transcribed text instead of overwriting existing input content (#6212);
- Q&A Page: Added a clear input content function after users type content in the input box (#6212);
- Q&A Page: Users can normally send new questions after switching to Session 2 while Session 1 is generating replies;
- Agent: Files submitted via forms can be downloaded from conversation logs (#5271);
- Agent: The sendMessage method in the htmlrender tag of advanced agent opening remarks supports passing API parameters and user input parameters;
- Agent: Added tool source information display in the operation menu of tool nodes for advanced agents;
MaxKB alternatives
| # | Agent | Pulse | Downloads 7d | 7d | 30d | VS Code installs | Stars | Latest release | Price | Last 90 days | |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 6 |
n8nn8n |
74 | 141K | up 30.2% | down 24.3% | — | 207K+92/day | 2.41.7yesterday | Free | ||
| 12 |
DifyLangGenius |
63 | — | — | — | — | 158K+73/day | 1.17.126d ago | Free | ||
| 46 |
FlowiseFlowiseAI |
49 | 2,943 | up 1.1% | down 9.3% | — | 55.5K+6/day | 3.1.42mo ago | Free | ||
| 53 |
LangflowLangflow (DataStax, an IBM company) |
47 | 14.5K | up 32.2% | down 26.6% | — | 156K+32/day | 1.12.47d ago | Free (OSS) | ||
| 72 |
AnythingLLMMintplex Labs |
43 | — | — | — | — | 66.7K+33/day | 1.17.05d ago | Free + $50/mo | ||
| 83 |
ActivepiecesActivepieces |
41 | — | — | — | — | 24.9K+22/day | 0.92.16d ago | Free | ||
| No agents match that filter. | |||||||||||
MaxKB FAQ
How much does MaxKB cost?
Community edition free (GPL-3.0); Professional edition sold as a perpetual licence priced in CNY, Enterprise by quote.
Is MaxKB open source?
Yes. MaxKB is open source, released under the GPL-3.0 license.
How popular is MaxKB?
The GitHub repository has 22.9K stars, 225 of them added in the last 30 days. The latest stable release is 2.10.6-lts, published Sep 3, 2026.
What is the latest version of MaxKB?
The latest stable release we track is 2.10.6-lts, published on Sep 3, 2026.
What are the alternatives to MaxKB?
The closest alternatives in the same category by Pulse Score are n8n, Dify, Flowise, Langflow.
Where these numbers come from
GitHub: 1panel-dev/maxkb. Site rank: maxkb.cn on the Tranco list. See data sources for how each one is collected.
Product facts and pricing were checked against: github.com, hub.docker.com.