CVE-2026-86173

MindsDB (mindshub) through 26.1.0 contains an unauthenticated server-side request forgery (SSRF) vulnerability in the web crawler handler . By supplying caller-controlled URLs to CrawlerTable.list , attackers can bypass the allowlist control due to a default empty configuration , allowing them to...