v2.0.0

Important Upgrades

■ Comprehensive Upgrade of Multi-Tenant Permission Management System (X-Pack)

In MaxKB V2, the multi-tenant permission management system has been fully upgraded. Through the collaboration of four modules: user management, role management, workspace, and resource authorization, an extensible multi - tenant permission management system has been built. It effectively supports the permission and resource management needs of multiple organizations, departments, and user groups, achieving precise control of permissions and resources by the system.

Role management is the core of the RBAC permission system. MaxKB V2 comes with three preset roles: system administrator, workspace administrator, and ordinary user. The system administrator has system - level management permissions, the workspace administrator is responsible for managing members and resource authorization, and ordinary users can maintain self - created and authorized resources.

In addition, MaxKB V2 supports the function of custom roles based on the system - preset roles. It allows for personalized permission configuration on the basis of inheriting the permissions of system administrators, workspace administrators, or ordinary users.

■ New Shared Resource Management Function (X-Pack)

MaxKB V2 has added a shared resource function, supporting cross - workspace resource reuse and collaboration. System administrators can uniformly manage core resources such as knowledge bases, tools, and models, and authorize them to designated workspaces. While ensuring the secure sharing of resources, it achieves a balance between sharing and control through permission control.

■ New Conversation User Management Function (X-Pack)

MaxKB V2 has also added the "conversation user management" function, supporting identity authentication on the question - asking end. Through the linkage of modules such as conversation users, user groups, application - conversation users, and knowledge base - conversation user authorization, this function realizes the management and control of users' question - asking scope and knowledge retrieval permissions. Thus, it achieves precise management of "one person, one permission" and "one group, one permission", further enhancing the security and controllability of the system. The new version of MaxKB also supports third - party authentication methods such as LDAP, OIDC, CAS, and OAuth2 to meet enterprise data security requirements.

■ Support for Managing Applications, Knowledge Bases, and Tools by Folder Directories

MaxKB V2 has upgraded its resource management capabilities. After logging in, users can enter the workspace to manage resources. Workspace resources include four core types: applications, knowledge bases, tools, and models. Among them, applications, knowledge bases, and tools can be managed by folder directories. This improvement facilitates users to classify and organize resources, conduct hierarchical management, and perform quick retrieval, greatly improving the efficiency of resource management and the convenience of use.

Enhancements

• Resource Management: System administrators are supported to view the list of applications, knowledge bases, tools, and model resources of all workspaces;
• Knowledge Base: After uploading offline documents to the general knowledge base, the original documents will be stored, and downloading of the original documents is supported;
• Knowledge Base: The segment detail page is optimized to support the adjustment of segment order;
• Application: The knowledge base retrieval node and multi - path recall node of advanced orchestration applications have added a switch setting of "results displayed in knowledge sources";
• Application: In the "display settings" function, setting the chat background of the question - and - answer page is supported; (X - Pack)
• Application: When having a conversation in the debugging preview, the saved application configuration is used;
• Application: An entry of "go to conversation" is added to the "settings" page of the application, facilitating users to go to the question - and - answer page for conversation after adjusting the configuration;
• Question - and - Answer Page: Advanced orchestration applications support the display of knowledge sources;
• Question - and - Answer Page: The interaction and style of the question - and - answer page are optimized;
• Security: Fixed a remote command execution vulnerability in the tool module (CVE-2025-53927);
• Security: Fixed a potential remote command execution vulnerability during MCP calls (CVE-2025-53928).

P.S. MaxKB does not currently support direct upgrade from version v1.10.x to v2.0.x. The MaxKB team plans to release a related migration tool in September 2025.