Skip to content
OpenAdvisories

Vendor

MindsDB

24 known vulnerabilities.

Products

MindsDB 22 mindsdb/mindsdb 1 Minds Platform 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-73678 Public exploit

    MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()

    MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ e…

    MindsDB Minds Platform
  • High 8.8
    CVE-2026-27483 Public exploit EPSS 11%

    MindsDB has Path Traversal in /api/files Leading to Remote Code Execution

    MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a path traversal vulnerability in Mindsdb's /api/files interface, which an authenticated attacker can exploit to achieve remote command execut…

    MindsDB MindsDB mindsdb PyPI
  • High 8.1
    CVE-2025-68472 Public exploit EPSS 20%

    MindsDB has improper sanitation of filepath that leads to information disclosure and DOS

    MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.11.1, an unauthenticated path traversal in the file upload API lets any caller read arbitrary files from the server filesystem and move them into MindsDB’s st…

    MindsDB MindsDB mindsdb PyPI
  • High 8.8
    CVE-2024-45846 Public exploit

    MindsDB Eval Injection vulnerability

    An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT WHERE’ clause containing Python code is run against a datab…

    MindsDB MindsDB mindsdb PyPI