{"id":"CVE-2024-45852","aliases":["EUVD-2024-0110","GHSA-7vhj-pfwv-hx3w","PYSEC-2024-82"],"status":"published","title":"MindsDB Deserialization of Untrusted Data vulnerability","description":"Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0068,"percentile":0.5269,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-502"],"published":"2024-09-12T13:02:29Z","modified":"2026-06-17T07:54:57Z","affected":[{"source":"ghsa","ecosystem":"PyPI","package":"mindsdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.3.2.0"},{"last_affected":"24.9.2.1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"mindsdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.3.2.0"},{"last_affected":"24.9.2.1"}]}],"versions":["23.10.2.0","23.10.3.0","23.10.3.1","23.10.5.0","23.11.1.0","23.11.4.0","23.11.4.1","23.11.4.4a6","23.12.4.0","23.12.4.1","23.12.4.2","23.3.2.0","23.3.3.0","23.3.3.1","23.3.3.2","23.3.3.3","23.3.3.4","23.3.3.5","23.3.4.0","23.3.5.0","23.4.3.0","23.4.3.1","23.4.3.2","23.4.4.0","23.4.4.1","23.4.4.2","23.4.4.3","23.4.4.4","23.5.3.1","23.5.3.2","23.5.4.1","23.6.1.1","23.6.2.0","23.6.3.0","23.6.3.1","23.6.4.0","23.6.5.0","23.6.5.1","23.7.1.0","23.7.2.0","23.7.3.1","23.7.4.0","23.7.4.1","23.8.1.0","23.8.3.0","23.9.1.0","23.9.1.1","23.9.2.0","23.9.2.1","23.9.3.0","23.9.3.1","24.1.4.0","24.2.3.0","24.3.4.0","24.3.4.1","24.3.4.2","24.3.5.0","24.4.2.0","24.4.2.1","24.4.3.0","24.5.4.0","24.6.1.0","24.6.1.1","24.6.2.0","24.6.2.2","24.6.3.0","24.6.3.1","24.6.4.1","24.7.1.0","24.7.2.0","24.7.3.0","24.7.4.0","24.7.4.1","24.7.5.0","24.8.1.0","24.8.1.1","24.8.2.0","24.8.3.0","24.8.4.0","24.9.1.0","24.9.2.0","24.9.2.1"]},{"source":"osv","ecosystem":"PyPI","package":"mindsdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.3.2.0"}]}],"versions":["23.10.2.0","23.10.3.0","23.10.3.1","23.10.5.0","23.11.1.0","23.11.4.0","23.11.4.1","23.11.4.4a6","23.12.4.0","23.12.4.1","23.12.4.2","23.3.2.0","23.3.3.0","23.3.3.1","23.3.3.2","23.3.3.3","23.3.3.4","23.3.3.5","23.3.4.0","23.3.5.0","23.4.3.0","23.4.3.1","23.4.3.2","23.4.4.0","23.4.4.1","23.4.4.2","23.4.4.3","23.4.4.4","23.5.3.1","23.5.3.2","23.5.4.1","23.6.1.1","23.6.2.0","23.6.3.0","23.6.3.1","23.6.4.0","23.6.5.0","23.6.5.1","23.7.1.0","23.7.2.0","23.7.3.1","23.7.4.0","23.7.4.1","23.8.1.0","23.8.3.0","23.9.1.0","23.9.1.1","23.9.2.0","23.9.2.1","23.9.3.0","23.9.3.1","24.1.4.0","24.10.1.0","24.10.2.0","24.10.3.0","24.10.4.0","24.10.4.1","24.10.4.2","24.10.5.0","24.11.1.0","24.11.1.1","24.11.2.0","24.11.3.0","24.11.4.0","24.11.4.1","24.11.4.2","24.12.1.0","24.12.2.0","24.12.2.1","24.12.2.2","24.12.3.0","24.12.4.0","24.2.3.0","24.3.4.0","24.3.4.1","24.3.4.2","24.3.5.0","24.4.2.0","24.4.2.1","24.4.3.0","24.5.4.0","24.6.1.0","24.6.1.1","24.6.2.0","24.6.2.2","24.6.3.0","24.6.3.1","24.6.4.1","24.7.1.0","24.7.2.0","24.7.3.0","24.7.4.0","24.7.4.1","24.7.5.0","24.8.1.0","24.8.1.1","24.8.2.0","24.8.3.0","24.8.4.0","24.9.1.0","24.9.2.0","24.9.2.1","24.9.3.0","24.9.3.1","24.9.3.2","24.9.4.0","24.9.4.1","25.1.2.0","25.1.2.1","25.1.3.0","25.1.4.0","25.1.5.0","25.1.5.1","25.1.5.2","25.1.5.3","25.10.0","25.10.0rc1","25.10.1","25.11.0","25.11.0rc1","25.11.0rc2","25.11.1","25.12.0","25.12.0rc1","25.13.0","25.13.0rc1","25.13.0rc2","25.13.1","25.14.0","25.14.0rc1","25.14.1","25.2.1.0","25.2.1.2","25.2.2.0","25.2.2.1","25.2.2.2","25.2.3.0","25.2.4.0","25.3.1.0","25.3.2.0","25.3.3.0","25.3.4.0","25.3.4.1","25.3.4.2","25.4.1.0","25.4.2.0","25.4.2.1","25.4.3.0","25.4.3.1","25.4.3.2","25.4.4.0","25.4.5.0","25.5.3.0","25.5.4.0","25.5.4.1","25.5.4.2","25.6.2.0","25.6.3.0","25.6.3.1","25.6.4.0","25.7.1.0","25.7.2.0","25.7.3.0","25.7.4.0","25.8.2.0","25.8.3.0","25.9.1.0","25.9.1.1","25.9.1.2","25.9.2.0a1","25.9.3rc1","26.0.0","26.0.0rc1","26.0.0rc2","26.0.0rc3","26.0.1","26.1.0","26.1.0rc1"]}],"products":[{"vendor":"mindsdb","product":"mindsdb"}],"references":[{"url":"https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb/","tags":["Exploit","Third Party Advisory","evidence","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45852","tags":["advisory"]},{"url":"https://hiddenlayer.com/sai-security-advisory/2024-09-mindsdb","tags":["web"]},{"url":"https://github.com/mindsdb/mindsdb/blob/v24.9.2.1/mindsdb/integrations/handlers/byom_handler/proc_wrapper.py#L54-L55","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/mindsdb/PYSEC-2024-82.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-7vhj-pfwv-hx3w","tags":["advisory"]},{"url":"https://github.com/mindsdb/mindsdb","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2024-45852","description":"Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.","status":"published","published":"2024-09-12T13:02:29.831Z","modified":"2024-09-12T17:15:03.659Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:34:08.16279Z"}],"euvd":[{"id":"EUVD-2024-0110","description":"Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.","status":"published","published":"2024-09-12T13:02:29Z","modified":"2024-09-12T17:15:03Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:55:56.835723Z"}],"ghsa":[{"id":"GHSA-7vhj-pfwv-hx3w","title":"MindsDB Deserialization of Untrusted Data vulnerability","description":"Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.","status":"published","published":"2024-09-12T15:33:01Z","modified":"2024-09-16T22:34:08Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:38:03.800952Z"}],"nvd":[{"id":"CVE-2024-45852","description":"Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.","status":"published","published":"2024-09-12T13:15:14.403Z","modified":"2026-06-17T07:54:57.91Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:10:25.561537Z"}],"osv":[{"id":"GHSA-7vhj-pfwv-hx3w","title":"MindsDB Deserialization of Untrusted Data vulnerability","description":"Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.","status":"published","published":"2024-09-12T15:33:01Z","modified":"2024-09-16T22:48:28.900595Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T15:46:41.349637Z"},{"id":"PYSEC-2024-82","description":"Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.","status":"published","published":"2024-09-12T13:15:00Z","modified":"2026-06-10T17:02:07.586129441Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:54.242332Z"}]}}