CVE-2026-73678-PoC

CVE-2026-73678 — MindsDB Minds Platform 未認証RCE（CVSS 10.0） CVSS 10.0（緊急） · CWE-94 / CWE-306 · GHSA-jcxw-h8ph-pxpv · VulnCheck 概要 Minds Platform（mindsdb/mindshub のオープンソースバックエンド。旧称 mindsdb/minds-platform）は、POST /api/v1/responses/（OpenAI互換のResponses API、ポート 26866 ）を一切の認証なしで 公開しています。認証ミドルウェアは存在しません —...

MindsDB - Remote Code Execution

MindsDB 25.9.1.1 contains a remote code execution caused by path traversal in the /api/files upload file module, letting authenticated attackers write arbitrary files and execute commands, exploit requires authentication. id: CVE-2026-27483 info: name: MindsDB - Remote Code Execution author:...

MindsDB -DNS Rebinding SSRF Protection Bypass

Detects DNS rebinding vulnerability that allows bypass of SSRF protection. The vulnerability exists in the URL validation mechanism where DNS resolution is performed without considering DNS rebinding attacks. id: CVE-2024-24759 info: name: MindsDB -DNS Rebinding SSRF Protection Bypass author: Lee...

bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork

CVE-2026-73678 — MindsDB Minds Platform / MindsHub Cowork における非認証 RCE CVE-2026-73678 の PoC（CVSS 3.1 10.0 Critical 、AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H）。 詳細な解説: www.hunt-benito.com/blog/bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork/ Cowork の cowork-server FastAPI サイドカーは...

cve-2026-27483-lab

CVE-2026-27483 实验室 - 企业级漏洞学习环境 一个完整、真实、企业级风格的基于 Docker 的实验室，用于学习、测试和防御 CVE-2026-27483（MindsDB 路径遍历 → 远程代码执行）。本仓库提供可部署的实验室拓扑、配置文件、最小化容器镜像、检测规则和辅助脚本，使您能够安全地搭建一个隔离环境，练习发现、利用（已脱敏）和防御。 重要提示：本实验室有意包含存在漏洞的 MindsDB 版本，仅用于教育目的。请仅在隔离、离网环境中运行，切勿将其暴露于公共网络。 目录 架构与组件 快速开始（如何运行） 配置档与资源选项（最小化 / 监控）...

cve-2026-27483

CVE-2026-27483 MindsDB パストラバーサルからRCEへのPoC このPoCスクリプトは、以下のGitHubアドバイザリに基づいています。 デフォルトではMindsDBは認証を使用しません PoCは認証なし と認証あり の両方のモードをサポートしています /api/handlers/ をクエリして利用可能なハンドラーを見つけ、インストールされていない任意の利用可能なハンドラー名を使用できます PoCは /venv/lib/python3.10/site-packages/pip/init.py を上書きします...

VulnCheck KEV: CVE-2025-68472

MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.11.1, an unauthenticated path traversal in the file upload API lets any caller read arbitrary files from the server filesystem and move them into MindsDB’s storage, exposing sensitive data. The PU...

(0Day) MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MindsDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the OpenBBtable class. The issue results from the lack of proper validation of a user-supplied strin...

CVE-2026-86173

MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty...

CVE-2026-86173 MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler

MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty...

CVE-2026-86173

MindsDB (mindshub) through 26.1.0 contains an unauthenticated server-side request forgery (SSRF) vulnerability in the web crawler handler . By supplying caller-controlled URLs to CrawlerTable.list , attackers can bypass the allowlist control due to a default empty configuration , allowing them to...

EUVD-2026-71972

MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty...

CVE-2026-86173 MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler

MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty...

CVE-2026-86173 MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler

MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty...

PT-2026-86397

MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty...

CVE-2026-86173: Server-Side Request Forgery (SSRF)

MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty...

Exploit for CVE-2026-73678

CVE-2026-73678 — Unauthenticated RCE in MindsDB Minds Platform...

CVE-2026-73678

MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...

CVE-2026-73678 MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()

MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...

CVE-2026-73678

MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...