MI
Product
mindsdb
26
CVEs
0
On KEV
9.1
Max CVSS
1
New 30D
Severity mix
Critical 3High 17Medium 6Low 0
Watch
Add mindsdb to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-92207 New | 8.8 | Oct 21 | MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability Affected: 25.10.1 |
| CVE-2026-27483 | 8.8 | Feb 24 | MindsDB has Path Traversal in /api/files Leading to Remote Code Execution Affected: < 25.9.1.1 |
| CVE-2024-45852 | 8.8 | Sep 12 | Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when… Affected: 23.3.2.0 and later |
| CVE-2024-45851 | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server Affected: 23.10.5.0 before 24.7.4.1 |
| CVE-2024-45850 | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server Affected: 23.10.5.0 before 24.7.4.1 |
| CVE-2024-45849 | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server Affected: 23.10.5.0 before 24.7.4.1 |
| CVE-2024-45848 | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server Affected: 23.12.4.0 before 24.7.4.1 |
| CVE-2024-45847 | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.11.4.2 up to 24.7.4.1 of the MindsDB platform, when one of several integrations is installed on the server Affected: 23.11.4.2 before 24.7.4.1 |
| CVE-2024-45846 | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server Affected: 23.10.3.0 before 24.7.4.1 |
| CVE-2022-23522 | 8.8 | Mar 30 | MindsDB is an open source machine learning platform Affected: before 22.11.4.3 |
| CVE-2026-86173 | 7.5 | Sep 5 | MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler Affected: through 26.1.0 |
| CVE-2024-45855 | 7.5 | Sep 12 | Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the… Affected: 23.10.2.0 and later |
| CVE-2024-45854 | 7.5 | Sep 12 | Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the… Affected: 23.10.3.0 and later |
| CVE-2024-45853 | 7.5 | Sep 12 | Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the… Affected: 23.10.2.0 and later |
| CVE-2023-30620 | 7.5 | Apr 21 | mindsdb is a Machine Learning platform to help developers build AI solutions Affected: through 23.1.5.0 |
| CVE-2026-7711 | 7.3 | May 3 | MindsDB Engine proc_wrapper.py exec unrestricted upload Affected: 26.01 |
| CVE-2026-2531 | 7.3 | Feb 16 | MindsDB File Upload security.py clear_filename server-side request forgery Affected: 25.14.0; 25.14.1 |
Showing 17