bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork

CVE-2026-73678 — Unauthenticated RCE in MindsDB Minds Platform / MindsHub Cowork PoC for CVE-2026-73678 CVSS 3.1 10.0 Critical , AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Full write-up: www.hunt-benito.com/blog/bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork/ The Cowork...

CVE-2026-82278 BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once

BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow runonce endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/runonce endpoint, which executes them with exec...