416 matches found
change-analyzer (>=0.14.0, <=0.16.1), mindsdb (>=1.0.7, <=1.3.1) potentially affected by CVE-2026-31237 via ludwig (>=0.1.1, <=0.5.5)
ludwig PYPI version =0.1.1, =0.14.0, =1.0.7, =1.3.1 Source cves: CVE-2026-31237 Source advisory: OSV:PYSEC-2026-404...
change-analyzer (>=0.14.0, <=0.16.1), mindsdb (>=1.0.7, <=1.3.1) potentially affected by CVE-2026-31238 via ludwig (>=0.1.1, <=0.5.5)
ludwig PYPI version =0.1.1, =0.14.0, =1.0.7, =1.3.1 Source cves: CVE-2026-31238 Source advisory: OSV:PYSEC-2026-405...
CVE-2026-7711
A weakness has been identified in MindsDB up to 26.01. This impacts the function exec of the file mindsdb/integrations/handlers/byomhandler/procwrapper.py of the component Engine Handler. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit ha...
change-analyzer (>=0.14.0, <=0.16.1), mindsdb (>=1.0.7, <=1.3.1) potentially affected by CVE-2026-31238 via ludwig (>=0.1.1, <=0.5.5)
ludwig PYPI version =0.1.1, =0.14.0, =1.0.7, =1.3.1 Source cves: CVE-2026-31238 Source advisory: SNYK:PYTHON-LUDWIG-16757931...
change-analyzer (>=0.14.0, <=0.16.1), mindsdb (>=1.0.7, <=1.3.1) potentially affected by CVE-2026-31238 via ludwig (>=0.1.1, <=0.5.5)
ludwig PYPI version =0.1.1, =0.14.0, =1.0.7, =1.3.1 Source cves: CVE-2026-31238 Source advisory: GHSA-XP5Q-5Q7G-Q26R...
change-analyzer (>=0.14.0, <=0.16.1), mindsdb (>=1.0.7, <=1.3.1) potentially affected by CVE-2026-31238 via ludwig (>=0.1.1, <=0.5.5)
ludwig PYPI version =0.1.1, =0.14.0, =1.0.7, =1.3.1 Source cves: CVE-2026-31238 Source advisory: OSV:GHSA-XP5Q-5Q7G-Q26R...
change-analyzer (>=0.14.0, <=0.16.1), mindsdb (>=1.0.7, <=1.3.1) potentially affected by CVE-2026-31237 via ludwig (>=0.1.1, <=0.5.5)
ludwig PYPI version =0.1.1, =0.14.0, =1.0.7, =1.3.1 Source cves: CVE-2026-31237 Source advisory: GHSA-WCR3-GM9F-F87Q...
change-analyzer (>=0.14.0, <=0.16.1), mindsdb (>=1.0.7, <=1.3.1) potentially affected by CVE-2026-31237 via ludwig (>=0.1.1, <=0.5.5)
ludwig PYPI version =0.1.1, =0.14.0, =1.0.7, =1.3.1 Source cves: CVE-2026-31237 Source advisory: OSV:GHSA-WCR3-GM9F-F87Q...
MindsDB CVE-2026-27483 detection
Detects MindsDB versions 25.9.1.1 potentially affected by CVE-2026-27483 path traversal in /api/files that can lead to RCE. !/usr/bin/env python3 -- coding: utf-8 -- import re from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation...
MindsDB CVE-2026-27483 - Path Traversal to RCE
MindsDB versions below 25.9.1.1 are vulnerable to a path traversal in /api/files upload. A crafted file write can overwrite pip internals and execute attacker-controlled code when a handler installation is triggered. !/usr/bin/env python3 -- coding: utf-8 -- import re from kittysploit import from...
CVE-2026-7712
A security vulnerability has been detected in MindsDB up to 26.01. Affected is the function pickle.loads of the component Pickle Handler. The manipulation leads to deserialization. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vend...
📄 MindsDB 25.9.1.1 Path Traversal
MindsDB version 25.9.1.1 suffers from a path traversal vulnerability. Exploit Title: MindsDB 25.9.1.1 - Path Traversal Date: 06-03-2026 Exploit Author: Lohitya Pushkar thewhiteh4t Vendor Homepage: https://mindsdb.com/ Software Link: https://github.com/mindsdb/mindsdb Version: not installed handle...
Deserialization of Untrusted Data
Overview MindsDB is a MindsDB server, provides server capabilities to mindsdb native python library Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the pickle.loads function in the Pickle Handler component. An attacker can execute arbitrary code by...
GHSA-9F6M-65V9-X9G2 MindsDB has an Improper Access Control Issue
A weakness has been identified in MindsDB up to 26.01. This impacts the function exec of the file mindsdb/integrations/handlers/byomhandler/procwrapper.py of the component Engine Handler. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit ha...
Access Control Bypass
Overview MindsDB is a MindsDB server, provides server capabilities to mindsdb native python library Affected versions of this package are vulnerable to Access Control Bypass via the exec function in the mindsdb/integrations/handlers/byomhandler/procwrapper.py component. An attacker can gain...
MindsDB has an Improper Access Control Issue
A weakness has been identified in MindsDB up to 26.01. This impacts the function exec of the file mindsdb/integrations/handlers/byomhandler/procwrapper.py of the component Engine Handler. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit ha...
CVE-2026-7711
A weakness has been identified in MindsDB up to 26.01. This impacts the function exec of the file mindsdb/integrations/handlers/byomhandler/procwrapper.py of the component Engine Handler. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit ha...
CVE-2026-7712
A security vulnerability has been detected in MindsDB up to 26.01. Affected is the function pickle.loads of the component Pickle Handler. The manipulation leads to deserialization. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vend...
MindsDB 25.9.1.1 - Path Traversal
Exploit Title: MindsDB 25.9.1.1 - Path Traversal Date: 06-03-2026 Exploit Author: Lohitya Pushkar thewhiteh4t Vendor Homepage: https://mindsdb.com/ Software Link: https://github.com/mindsdb/mindsdb Version: not installed handlers BANNER = """ ------------------------------------- --- CVE-2026-274...
MindsDB input validation error vulnerability
MindsDB is a joint query engine designed by MindsDB Corporation, specifically for AI agents and large language models. It can handle questions related to PB-level enterprise data. MindsDB versions 26.01 and earlier contained a vulnerability related to input validation errors. This vulnerability...