Cpe:2.3:a:mindsdb:mindsdb:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3amindsdbmindsdb/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 05 Sep 2026 11:32:01 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgUnauthenticated SSRF Vulnerability in MindsDB Crawlerhttps://feed.craftedsignal.io/briefs/2026-09-mindsdb-ssrf/Sat, 05 Sep 2026 11:32:01 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-mindsdb-ssrf/MindsDB versions 26.1.0 and earlier are vulnerable to unauthenticated server-side request forgery (SSRF) in the web crawler handler, enabling unauthorized access to internal resources and cloud metadata.MindsDB versions up to and including 26.1.0 contain a Server-Side Request Forgery (SSRF) vulnerability within the web crawler handler. The flaw exists in the 'CrawlerTable.list' function, which fails to properly validate user-supplied URLs. Due to a default empty configuration for the allowlist, an unauthenticated attacker can supply arbitrary target URLs to the crawler. This allows the application to be coerced into making outbound requests on behalf of the server. The vulnerability is significant as it provides a mechanism to bypass network perimeters, potentially leading to unauthorized interaction with internal services or the exfiltration of sensitive cloud instance metadata. Defenders should treat this as a high-priority risk if the MindsDB instance is deployed within a cloud environment or has access to internal network segments.

Impact

Successful exploitation allows attackers to perform reconnaissance on internal networks, access hidden services, or retrieve sensitive configuration and authentication data from cloud metadata services. This could facilitate lateral movement or further exploitation of infrastructure components within the target organization.

Recommendation

  • Upgrade MindsDB to a version beyond 26.1.0 as soon as a patch is available.
  • Implement restrictive network egress policies for the MindsDB application host to prevent access to internal RFC1918 address space and cloud metadata IP addresses (e.g., 169.254.169.254).
  • Configure the MindsDB crawler allowlist explicitly, rather than relying on default settings, to restrict permissible target domains.
]]>highadvisoryweb-applicationssrfvulnerability