Skip to content
OpenAdvisories

Vendor

MindsDB

24 known vulnerabilities.

Products

MindsDB 22 mindsdb/mindsdb 1 Minds Platform 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-73678 Public exploit

    MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()

    MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ e…

    MindsDB Minds Platform