334 matches found
cve-2026-27483
CVE-2026-27483 MindsDB パストラバーサルからRCEへのPoC このPoCスクリプトは、以下のGitHubアドバイザリに基づいています。 デフォルトではMindsDBは認証を使用しません PoCは認証なし と認証あり の両方のモードをサポートしています /api/handlers/ をクエリして利用可能なハンドラーを見つけ、インストールされていない任意の利用可能なハンドラー名を使用できます PoCは /venv/lib/python3.10/site-packages/pip/init.py を上書きします...
cve-2026-27483-lab
CVE-2026-27483 实验室 - 企业级漏洞学习环境 一个完整、真实、企业级风格的基于 Docker 的实验室，用于学习、测试和防御 CVE-2026-27483（MindsDB 路径遍历 → 远程代码执行）。本仓库提供可部署的实验室拓扑、配置文件、最小化容器镜像、检测规则和辅助脚本，使您能够安全地搭建一个隔离环境，练习发现、利用（已脱敏）和防御。 重要提示：本实验室有意包含存在漏洞的 MindsDB 版本，仅用于教育目的。请仅在隔离、离网环境中运行，切勿将其暴露于公共网络。 目录 架构与组件 快速开始（如何运行） 配置档与资源选项（最小化 / 监控）...
CVE-2026-73678-PoC
CVE-2026-73678 — MindsDB Minds Platform 未认证 RCE（CVSS 10.0） CVSS 10.0（严重） · CWE-94 / CWE-306 · GHSA-jcxw-h8ph-pxpv · VulnCheck 摘要 Minds Platform（mindsdb/mindshub 的开源后端，先前为 mindsdb/minds-platform）暴露了 POST /api/v1/responses/（一个兼容 OpenAI 的 Responses API，端口 26866 ），完全没有认证 。没有任何认证中间件——没有 Bearer...
MindsDB - Remote Code Execution
MindsDB 25.9.1.1 contains a remote code execution caused by path traversal in the /api/files upload file module, letting authenticated attackers write arbitrary files and execute commands, exploit requires authentication. id: CVE-2026-27483 info: name: MindsDB - Remote Code Execution author:...
MindsDB -DNS Rebinding SSRF Protection Bypass
Detects DNS rebinding vulnerability that allows bypass of SSRF protection. The vulnerability exists in the URL validation mechanism where DNS resolution is performed without considering DNS rebinding attacks. id: CVE-2024-24759 info: name: MindsDB -DNS Rebinding SSRF Protection Bypass author: Lee...
bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork
CVE-2026-73678 —— MindsDB Minds Platform / MindsHub Cowork 中的未认证远程代码执行（RCE） CVE-2026-73678 的 PoC（CVSS 3.1 10.0 严重 ，AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H）。 完整分析文章：www.hunt-benito.com/blog/bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork/ Cowork 的 cowork-server FastAPI sidecar...
CVE-2026-86173
MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty...
CVE-2026-86173 MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler
MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty...
CVE-2026-86173
MindsDB (mindshub) through 26.1.0 contains an unauthenticated server-side request forgery (SSRF) vulnerability in the web crawler handler . By supplying caller-controlled URLs to CrawlerTable.list , attackers can bypass the allowlist control due to a default empty configuration , allowing them to...
EUVD-2026-71972
MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty...
CVE-2026-86173 MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler
MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty...
Exploit for CVE-2026-73678
CVE-2026-73678 — Unauthenticated RCE in MindsDB Minds Platform...
CVE-2026-73678
MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...
CVE-2026-73678 MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()
MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...
EUVD-2026-58787
MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...
CVE-2026-73678
MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...
CVE-2026-73678
CVE-2026-73678 enables unauthenticated remote code execution in MindsDB Minds Platform
CVE-2026-73678 MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()
MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...
PT-2026-72088
Name of the Vulnerable Software and Affected Versions MindsDB Minds Platform versions prior to 26.1.1 Description An unauthenticated remote code execution flaw allows attackers to execute arbitrary OS commands. The issue occurs when crafted prompts are submitted to the unprotected 'POST...