MI
Product
mindsdb
26
CVEs
0
On KEV
9.1
Max CVSS
1
New 30D
Severity mix
Critical 3High 17Medium 6Low 0
Watch
Add mindsdb to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-68472 | 9.1 | Jan 12 | MindsDB is a platform for building artificial intelligence from enterprise data Affected: before 25.11.1 |
| CVE-2024-24759 | 9.1 | Sep 5 | MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding Affected: < 23.12.4.2 |
| CVE-2023-50731 | 9.1 | Dec 22 | MindsDB is a SQL Server for artificial intelligence Affected: before 23.11.4.1 |
| CVE-2026-92207 New | 8.8 | Oct 21 | MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability Affected: 25.10.1 |
| CVE-2026-27483 | 8.8 | Feb 24 | MindsDB is a platform for building artificial intelligence from enterprise data Affected: before 25.9.1.1 |
| CVE-2024-45852 | 8.8 | Sep 12 | Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when… Affected: 23.3.2.0 and later |
| CVE-2024-45851 | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server Affected: 23.10.5.0 before 24.7.4.1 |
| CVE-2024-45850 | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server Affected: 23.10.5.0 before 24.7.4.1 |
| CVE-2024-45849 | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server Affected: 23.10.5.0 before 24.7.4.1 |
| CVE-2024-45848 | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server Affected: 23.12.4.0 before 24.7.4.1 |
| CVE-2024-45847 | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.11.4.2 up to 24.7.4.1 of the MindsDB platform, when one of several integrations is installed on the server Affected: 23.11.4.2 before 24.7.4.1 |
| CVE-2024-45846 | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server Affected: 23.10.3.0 before 24.7.4.1 |
| CVE-2022-23522 | 8.8 | Mar 30 | MindsDB is an open source machine learning platform Affected: before 22.11.4.3 |
| CVE-2026-86173 | 7.5 | Sep 5 | MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler Affected: through 26.1.0 |
| CVE-2024-45855 | 7.5 | Sep 12 | Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the… Affected: 23.10.2.0 and later |
| CVE-2024-45854 | 7.5 | Sep 12 | Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the… Affected: 23.10.3.0 and later |
| CVE-2024-45853 | 7.5 | Sep 12 | Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the… Affected: 23.10.2.0 and later |
| CVE-2023-30620 | 7.5 | Apr 21 | mindsdb is a Machine Learning platform to help developers build AI solutions Affected: through 23.1.5.0 |
| CVE-2026-7711 | 7.3 | May 3 | MindsDB Engine proc_wrapper.py exec unrestricted upload Affected: 26.01 |
| CVE-2026-2531 | 7.3 | Feb 16 | A security vulnerability has been detected in MindsDB up to 25.14.1 Affected: through 25.14.1 |
| CVE-2023-38699 | 6.5 | Aug 4 | MindsDB's AI Virtual Database allows developers to connect any AI/ML model to any datasource Affected: before 23.7.4.0 |
| CVE-2026-7712 | 6.3 | May 3 | MindsDB Pickle pickle.loads deserialization Affected: 26.01 |
| CVE-2024-3575 | 6.1 | Apr 16 | Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb Affected: 23.6.3.1 |
| CVE-2024-45856 | 5.4 | Sep 12 | A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine,… Affected: All versions, or not specified |
| CVE-2023-49796 | 5.3 | Dec 11 | MindsDB connects artificial intelligence models to real time data Affected: 23.7.4.1 |
| CVE-2023-49795 | 5.3 | Dec 11 | MindsDB connects artificial intelligence models to real time data Affected: before 23.11.4.1 |
Showing 26