CVE-2026-73678-PoC

CVE-2026-73678 — MindsDB Minds Platform 인증 없는 RCE CVSS 10.0 CVSS 10.0 Critical · CWE-94 / CWE-306 · GHSA-jcxw-h8ph-pxpv · VulnCheck 요약 Minds Platformmindsdb/mindshub의 오픈소스 백엔드, 이전에는 mindsdb/minds-platform은 완전히 인증 없이 POST /api/v1/responses/OpenAI 호환 Responses API, 포트 26866를 노출합니다. 인증 미들웨어가 없습니다 —...

Exploit for CVE-2026-73678

CVE-2026-73678 — MindsDB Minds Platform Unauthenticated RCE C...

CVE-2026-73678

MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...