v2.7.1

Bug Fixes

• Models: Fixed the error that occurred when using Embedding models from the Ollama provider;
• Installation & Deployment: Fixed the upgrade error caused by incompatible dependency package versions on some older machines;
• Agent: Fixed the issue where the style of tool call data was not displayed in execution details.

v1.10.13-lts

Bug Fixes

• Models: Fixed the error when adding the image generation model of Douban (Doubao);
• Applications: Fixed the issue where the service restarted when exporting conversation logs due to a large volume of conversation log data;
• Applications: Fixed the issue where conversation records could not be exported when there was abnormal content in conversation logs;
• Applications: Fixed the issue where the judge node could not handle multiple conditions;
• Login: Fixed the login failure issue when the username contained Chinese characters (#4232);
• Internationalization: Fixed the incorrect description when adding the vision model of Xorbits Inference under Traditional Chinese/Simplified Chinese language settings.

v2.7.0

New Features

• Tools: Added Skills management capability to tools（#4682）;
• Agent: Supported agents to call Skills autonomously（#4682）;
• Q&A Page: Supported sharing conversation records on the Q&A page;
• Knowledge Base: Supported directly adding/removing document tags from the tag dimension;
• Login Authentication (X-Pack): Supported configuring the allowed login methods for system users.

Feature Optimizations

• Agent: Added the function to search/locate nodes on the workflow orchestration page of advanced agents;
• Agent: Added support for searching models in the model selection drop-down box (#4769);
• Agent: When hovering the mouse over resources in the dialog boxes for selecting knowledge bases, tools, and agents, more information about the resources can be displayed (#4657);
• Agent: Added support for the "Not Equal To" option for conditions in the judge node of advanced agents (#4885);
• Knowledge Base: Added a "Tags" column to the document list (displayed), and supported adding tags to documents in this column (#4616);
• Q&A Page: Optimized the UI style of tool calls;
• Triggers: Added support for setting scheduled triggers via Cron expressions (#4820);
• Models: Added support for image generation models from the Gemini provider (#4492);
• Models: Added support for vision models from the Silicon Flow (Guiji Liudong) provider (#4789).

Bug Fixes

• Knowledge Base: Fixed the issue where documents were not exported in segmentation order when exporting (#4818);
• Agent (X-Pack): Fixed the issue where output content was not formatted with Markdown during conversations in the Lark client;
• Agent: Fixed the issue where the pop-up window was not fully displayed when users gave thumbs-up/down feedback after AI reply content, when embedded in third-party platforms with full-screen embedding selected;
• Agent: Fixed the issue where AI nodes were displayed as completed in execution details even though they were not fully executed (#4845);
• Agent: Fixed the issue where conversations could still be conducted when calling the same application using API Keys of different applications (#4854);
• Agent: Fixed the issue where the question optimization node did not take effect (#4874);
• Agent: Fixed the issue where the AI model and associated knowledge base in settings were cleared after moving files in simple agents (#4890);
• Q&A Page: Fixed the incorrect style display when form collection content existed during conversations;
• Q&A Page: Fixed the issue where conversation content was not internationalized when users gave thumbs-up/down feedback after AI reply content;
• Q&A Page (X-Pack): Fixed the issue where conversation users created by third parties could not modify their passwords after logging into the application via account login;
• Models: Fixed the error when adding image generation models from the Volcano Engine provider.

v2.6.1

Bug Fixes

• Agent: Fixed the issue where tool execution failed under certain circumstances in the agent workflow; #4790
• Agent: Fixed the issue of incorrect acquisition of historical records in AI Conversation nodes when parallel nodes existed in the agent workflow; #4778
• Agent: Fixed the front-end error caused by excessively large data streams returned by the back-end when the AI responded to questions;
• Knowledge Base: Fixed the issue where segmentation markers (blank lines and carriage returns) did not take effect after selecting intelligent segmentation for document uploads; #4791.

v2.6.0

New Features

• Agent: Added trigger activation capability;
• Agent (X-Pack): Supported setting validity period for Agent API Keys;
• Agent: Added IP Address and Source attributes to the conversation log list;
• Agent: Supported setting independent cleanup policies for uploaded files in conversation logs;
• Tools: Added trigger activation capability;
• Tools: Added the function to view execution records;
• Shared Tools (X-Pack): Added the function to view execution records;
• Triggers: Added trigger management function for the workspace administrator role;
• Knowledge Base: General Knowledge Base, Web Site Knowledge Base, and Lark Knowledge Base all support direct conversion to Workflow Knowledge Base;
• Knowledge Base: Added support for batch exporting documents in the document list;
• System Management (X-Pack): Supported setting validity period for system API Keys.

Feature Optimizations

• Agent: Adjusted the position of the Go to Conversation button to the Agent panel;
• Agent: Added a Current Moment setting for the default value of date-type parameters entered by users; after setting, the parameter dynamically obtains the current time on the Q&A page;
• Models: Added support for entering the API URL parameter for video models and speech recognition models of Alibaba Cloud BaiLian;
• Models: Vector models of the Volcano Engine provider support docking with multimodal vector models;
• Models: Speech recognition models of the Volcano Engine provider support the docking method of speech recognition for audio files;
• Models: Added support for setting the Response Type parameter (e.g., response_format=b64_json) in the model parameters of image generation models of the OpenAI provider; #4538
• System: Optimized internationalized copy and partial UI interfaces.

Bug Fixes

• Agent: Fixed the issue where the Referenced Segment Count and Segment Title + Content fields were missing when exporting conversation logs;
• Agent: Fixed the issue where the calling process was not displayed if a tool in skills had no input parameters when the AI model called the tool;
• Agent: Fixed the issue of disordered AI reply content when a sub-agent in a loop body also had a loop node (#4654);
• Agent: Fixed the issue where AI reply content did not automatically scroll to the bottom during Agent debugging (#4660);
• Login Authentication (X-Pack): Fixed the issue where the number of failed login attempts for displaying captcha could not be set to 0;
• Models: Fixed the issue where the slm speech recognition model of iFlytek Spark could not convert speech to text;
• Models: Fixed the error when editing the iat model of iFlytek Spark;
• Folders: Fixed the issue where users with only folder view permissions could still create subfolders (#4688).

v2.5.0

New Features

• Agent: Upgraded the "Application" module to the "Agent" module;
• Agent: Added automatic agent calling function to simple agents, and merged tools, MCP, and agents into the "Skills" function;
• Agent: Added automatic agent calling function to AI Conversation nodes in advanced agents, and merged tools, MCP, and agents into the "Skills" function;
• Agent: Supported creating agents via templates in the Template Center;
• Agent: Added exception branch output to all AI capability nodes in advanced agents to enhance process fault tolerance;
• Agent: Supported displaying feedback information filled by users in conversation log details;
• Agent: The user input parameter component in the Basic Information node supports multi-line text boxes, single-line tab components, and single-line multi-select tab components;
• Agent: Input parameters in custom tool nodes support boolean type;
• Q&A Page: Supported users to fill in feedback information when submitting feedback;
• Knowledge Base: Supported canceling the document import process in workflow knowledge bases;
• Knowledge Base: Added workflow import/export function to workflow knowledge bases;
• Knowledge Base: Supported viewing associated resources;
• Tools: Supported viewing associated resources;
• Tools: Added JSON text box and slider components to the component types in parameter dialogs;
• Folders: Supported sorting by name, creation time, and custom drag-and-drop order;
• Models: Supported viewing associated resources;
• Login Authentication (X-Pack): Added default role assignment function for third-party users in login settings;
• Login Authentication (X-Pack): Added account lockout function after failed login attempts in login settings;
• User Management: Supported setting default resource permissions when creating users;
• User Management (X-Pack): Supported batch role assignment and batch user deletion.

Feature Optimizations

• Agent: Added conversation user group {{global.chat_user_group}} to the start node in advanced agents;
• Knowledge Base: Optimized the hit test interface to use POST requests;
• Folders: Supported authorizing folders by user roles;
• API Key: Optimized system API Keys to be isolated by user;
• Q&A Page: Removed the limit of only viewing 20 historical chat records;
• Q&A Page: Supported editing and re-submitting the last question;
• Q&A Page (X-Pack): Supported logout function for third-party conversation users after logging into the Q&A page;
• System: Optimized the system UI interface.

Bug Fixes

• Security Vulnerability: Fixed the XSS vulnerability caused by file uploads;
• Security Vulnerability: Fixed the issue where Python code in the tool module loaded dynamic link libraries to bypass security restrictions;
• Security Vulnerability: Fixed the potential RCE issue caused by deserializing untrusted objects via pickle in Celery;
• Tools: Fixed the false interception of emails sent via the SMTP protocol;
• Agent: Fixed the issue where the scroll bar of the tool drop-down box in MCP nodes could not scroll;
• Agent: Fixed the style issue where execution details of MCP call and tool nodes exceeded the screen;
• Agent: Fixed the issue where child agents could not receive video files from parent agents (#4568);
• Knowledge Base: Fixed the style issue where video components in segmentation details exceeded the segmentation detail area (#4542);
• Knowledge Base: Fixed the issue where all videos automatically played when opening the segmentation details page.

v2.4.2

Bug Fixes

• Applications: Fixed the incorrect jump path of the Go to Conversation button on the workflow orchestration page when the system's secondary path has been modified;
• Applications: Fixed the issue where the reference variable selection could not be canceled for tool nodes in advanced orchestration applications;
• Applications: Fixed the issue where the workflow did not terminate when a node inside the loop body threw an error;
• Applications: Fixed the inconsistency between the node order in the add component dialog and the node order in the loop body;
• Applications (X-Pack): Fixed the redirection issue on the WeChat Work QR code login page for conversation users;
• Knowledge Base: Fixed the issue where the previous page state was not retained when returning to the document list page from the document segmentation details page;
• Knowledge Base: Fixed the parsing failure issue of global variables entered in the specified reply node of the workflow knowledge base;
• Knowledge Base: Removed the historical chat record function from the Image Understanding, Video Understanding, and AI Conversation nodes in the workflow knowledge base;
• Knowledge Base: Fixed the issue where newly created vector models were not displayed in the vector model list when creating them in the knowledge base creation interface;
• Resource List: Fixed the incorrect display of the resource list when moving resources to folders in the root directory of applications/knowledge bases/tools;
• Tools: Fixed the issue where data source tools lacked parameters set during debugging;
• Tools: Fixed the issue where IPv6-mapped IPv4 addresses were not intercepted;
• API Documentation: Fixed the incorrect parameter type of the document segmentation interface.

v2.4.1

Bug Fixes

• Applications: Fixed the issue where the "Submit" button could not be clicked when the form collection node was executed;
• Applications: Fixed the issue of incorrect retrieval results when the tag value of the document tag retrieval node was None;
• Applications: Fixed the issue where Input parameters were incompletely output when the AI model called MCP;
• Knowledge Base: Fixed the execution error of image understanding in the knowledge base workflow;
• Knowledge Base: Fixed the issue where zip files containing images could not be written to the knowledge base when uploaded;
• Knowledge Base: Fixed the issue where custom input file formats in local files of data source nodes were case-sensitive;
• Tools: Fixed the issue of abnormal console errors in the tool editor under certain circumstances;
• Models: Fixed the cache_dir error that occurred when adding a local reranking model.

v2.4.0

Security Vulnerability Fixes

• Fixed the permission bypass issue caused by system file overwriting (CVE-2025-66446);
• Fixed the permission bypass issue caused under specific concurrent conditions (CVE-2025-66419).

Special thanks to GitHub users @yck99, @NikoCat233, and @Threonine for discovering and promptly reporting the above vulnerabilities to the MaxKB open-source community!

New Features

• Knowledge Base: Added workflow knowledge base;
• Tools: Added data source tools;
• Tools: Tools in the Tool Store support two types: "Tool" and "Data Source";
• Models: AWS provider added support for vision models and reranking models;
• Models: Vision models of OpenAI, Ollama, vLLM, Xinference, and Zhipu AI providers support video understanding functionality;
• Models: Added support for large language models, vector models, and reranking models from the Docker AI provider;
• Applications: Added "URL Address" as an upload method in the file upload settings;
• Applications: Added ranking statistics for "User Consumed Tokens" and "User Question Count" to the monitoring statistics on the overview page;
• Resource Authorization: Supported filtering users by role when authorizing applications, knowledge bases, tools, and models to users by resource;
• Login Authentication (X-Pack): Added SAML2 login authentication method.

Feature Optimizations

• Applications: The generated prompts of AI conversation nodes in advanced applications no longer carry application names and description information;
• Applications: Supported outputting request parameters when AI models call MCP tools;
• Applications: Supported using shortcut keys to copy nodes into loop bodies in advanced orchestration;
• Tools: Supported importing three types of resources: tools, MCPs, and data sources;
• Tools: Adjusted the Tool Store entry to the tool list;
• Tools: Removed system built-in tools and moved them to the Tool Store.

Bug Fixes

• Q&A Page: Fixed the issue where retrieval results of knowledge base retrieval nodes in loop bodies were not displayed in knowledge sources;
• Applications: Fixed the incorrect display of execution time for loop nodes in execution details;
• Applications: Fixed the incorrect retrieval results when the variable value was empty in the document tag retrieval node;
• Knowledge Base: Fixed the issue where the original document could not be opened after downloading it following replacement (#4397);
• Models: Fixed the generation error of the qwen-image model from the Alibaba Cloud BaiLian provider (#4376);
• Models: Fixed the error when adding the gpt-5-codex model from the Azure OpenAI provider;
• Models: Fixed the incorrect setting of some parameters for vLLM models (#4403);
• Roles: Fixed the issue where the "About" permission authorized to workspace administrators and ordinary users did not take effect;
• Conversation Users (X-Pack): Fixed the issue where non-essential information was displayed in the conversation user query interface;
• API Documentation (X-Pack): Revised several inaccurate descriptions in the API documentation.

v2.3.1

Security Vulnerability Fixes

• Security Vulnerability: Fixed the vulnerability where Python code in tools could access local services (CVE-2025-64511);
• Security Vulnerability: Fixed the vulnerability where Python code in tools could obtain system configuration information (CVE-2025-64703).

Special thanks to the XlabAI Team of Tencent Xuanwu Lab (@XlabAITeam) for discovering and promptly feeding back the above vulnerabilities to the MaxKB open-source community!

Feature Optimizations

• System: Through code refactoring and architecture optimization, significantly reduced CPU and memory usage, comprehensively improving system resource utilization, stability, and concurrent processing capabilities;
• System: Displayed the user's name in the upper right corner after the user logs in to the system (#4315);
• Applications: Users authorized with "View" permission can access the "Settings" page of the application;
• Folders: Folders in the application, knowledge base, and tool lists support movement and drag-and-drop movement;
• Folders: Removed the hierarchical limit for folders in the application, knowledge base, and tool lists;
• User Management: Adjusted the maximum length of usernames and full names to 64 characters;
• Conversation Users (X-Pack): Adjusted the maximum length of usernames and full names to 64 characters.

Bug Fixes

• Knowledge Base: Fixed the occasional failure of document vectorization;
• Knowledge Base: Fixed the issue where the association between segments and questions was not synchronously deleted when deleting a document;
• Applications: Fixed the issue where multiple forms were repeatedly displayed in the conversation when there was a form collection node in the loop body (#4326);
• Applications: Fixed the issue where the output content directly displayed the "context" abnormal information during the conversation when there was a form collection node in the loop body;
• Applications: Fixed the issue where the output parameters of the loop node would become "None" when there was a form collection node in the loop body;
• Applications: Fixed the issue where the last folder was not displayed when adding a tool node;
• Resource Authorization: Fixed the issue where the folder would automatically collapse when authorizing resources under the folder;
• Q&A Page: Fixed the issue where users could not log in via WeChat Work QR code on the Safari browser.