Skip to content
Threat Feed
Subscribe

Vendor

MindsDB

4 briefs RSS
high advisory

Unauthenticated SSRF Vulnerability in MindsDB Crawler

MindsDB versions 26.1.0 and earlier are vulnerable to unauthenticated server-side request forgery (SSRF) in the web crawler handler, enabling unauthorized access to internal resources and cloud metadata.

MindsDB web-application ssrf vulnerability
1t 1c
critical advisory

Unauthenticated Remote Code Execution in MindsDB Minds Platform

MindsDB Minds Platform versions 26.1.0 and earlier are vulnerable to unauthenticated remote code execution via insecure handling of LLM prompts and unsandboxed scratchpad execution.

Minds Platform
1r 1t 1c
critical advisory

MindsDB Unrestricted File Upload Vulnerability (CVE-2026-7711)

CVE-2026-7711 allows for remote, unrestricted file uploads in MindsDB up to version 26.01 due to insufficient validation in the `exec` function of `proc_wrapper.py`, potentially leading to code execution or data exfiltration.

MindsDB cve vulnerability file-upload
2r 1t 1c
critical threat

MindsDB Path Traversal Vulnerability Leading to Remote Code Execution

A path traversal vulnerability in MindsDB versions prior to 25.9.1.1 allows an attacker to achieve remote code execution by uploading a malicious payload and triggering its execution.

MindsDB path-traversal rce webapp
3r 2t 1c