Directory Traversal

Overview MindsDB is a MindsDB server, provides server capabilities to mindsdb native python library Affected versions of this package are vulnerable to Directory Traversal in the /api/files endpoint due to insufficient validation of the uploaded file path. An attacker can write arbitrary files to...

mindsdb-server (>=0.9.1, <=1.2.2) potentially affected by CVE-2026-2531 via mindsdb (26.1.0)

mindsdb PYPI version 26.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mindsdb and may be impacted: - mindsdb-server =0.9.1, =1.2.2 Source cves: CVE-2026-2531 Source advisory: SNYK:PYTHON-MINDSDB-15285619...

Template Injection

Overview MindsDB is a MindsDB server, provides server capabilities to mindsdb native python library Affected versions of this package are vulnerable to Template Injection in the prepareprompts function, which allows the ContextualPreprocessor template to be corrupted. Note: Code injection is not...