Mindsdb vulnerabilities

Products

• Mindsdb 24

Newest

• mindsdb MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability CVE-2026-92207 8.8 HighOctober 21, 2026
• mindsdb MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler CVE-2026-86173 8.7 HighSeptember 5, 2026
• mindsdb minds platform MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec() CVE-2026-73678 Public exploit 10.0 CriticalAugust 14, 2026
• mindsdb MindsDB has Path Traversal in /api/files Leading to Remote Code Execution CVE-2026-27483 Public exploitFix available EPSS 11.0% 8.8 HighFebruary 24, 2026
• mindsdb MindsDB File Upload security.py clear_filename server-side request forgery CVE-2026-2531 Fix available 5.3 MediumFebruary 16, 2026
• mindsdb MindsDB has improper sanitation of filepath that leads to information disclosure and DOS CVE-2025-68472 Public exploitFix available EPSS 20.3% 8.1 HighJanuary 12, 2026
• mindsdb MindsDB Cross-site Scripting vulnerability CVE-2024-45856 9.0 CriticalSeptember 12, 2024
• mindsdb MindsDB Deserialization of Untrusted Data vulnerability CVE-2024-45855 7.1 HighSeptember 12, 2024
• mindsdb MindsDB Deserialization of Untrusted Data vulnerability CVE-2024-45854 7.1 HighSeptember 12, 2024
• mindsdb MindsDB Deserialization of Untrusted Data vulnerability CVE-2024-45853 7.1 HighSeptember 12, 2024
• mindsdb MindsDB Deserialization of Untrusted Data vulnerability CVE-2024-45852 8.8 HighSeptember 12, 2024
• mindsdb MindsDB Eval Injection vulnerability CVE-2024-45851 Fix available 8.8 HighSeptember 12, 2024
• mindsdb MindsDB Eval Injection vulnerability CVE-2024-45850 Fix available 8.8 HighSeptember 12, 2024
• mindsdb MindsDB Eval Injection vulnerability CVE-2024-45849 Fix available 8.8 HighSeptember 12, 2024
• mindsdb MindsDB Eval Injection vulnerability CVE-2024-45848 Fix available 8.8 HighSeptember 12, 2024
• mindsdb MindsDB Eval Injection vulnerability CVE-2024-45847 Fix available 8.8 HighSeptember 12, 2024
• mindsdb MindsDB Eval Injection vulnerability CVE-2024-45846 Public exploitFix available 8.8 HighSeptember 12, 2024
• mindsdb MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding CVE-2024-24759 Fix available 9.3 CriticalSeptember 5, 2024
• mindsdb, mindsdb mindsdb/mindsdb +1 more Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb CVE-2024-3575 5.8 MediumApril 16, 2024
• mindsdb MindsDB has arbitrary file write in file.py CVE-2023-50731 Fix available 9.1 CriticalDecember 15, 2023
• mindsdb MindsDB Arbitrary File Write vulnerability CVE-2023-49796 Fix available 5.3 MediumDecember 11, 2023
• mindsdb MindsDB Server-Side Request Forgery vulnerability CVE-2023-49795 Fix available 6.5 MediumDecember 11, 2023
• mindsdb MindsDB 'Call to requests with verify=False disabling SSL certificate checks, security issue.' issue CVE-2023-38699 Fix available 9.1 CriticalAugust 1, 2023
• mindsdb Arbitrary File Write when Extracting a Remotely retrieved Tarball in mindsdb/mindsdb CVE-2023-30620 Fix available 7.5 HighMarch 30, 2023
• mindsdb Arbitrary File Write when Extracting Tarballs retrieved from a remote location using in mindsdb CVE-2022-23522 Fix available 8.5 HighMarch 30, 2023