MI
Vendor
mindsdb
27
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-92207 New | MI MindsDB MindsDB | 8.8 | Oct 21 | MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability |
| CVE-2026-86173 | MI mindsdb mindsdb | 7.5 | Sep 5 | MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler |
| CVE-2026-73678 | MP Minds Platform MindsDB | 10.0 | Aug 14 | MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec() |
| CVE-2026-7712 | MI MindsDB Mindsdb | 6.3 | May 3 | MindsDB Pickle pickle.loads deserialization |
| CVE-2026-7711 | MI MindsDB Mindsdb | 7.3 | May 3 | MindsDB Engine proc_wrapper.py exec unrestricted upload |
| CVE-2026-27483 | MI Mindsdb Mindsdb | 8.8 | Feb 24 | MindsDB is a platform for building artificial intelligence from enterprise data |
| CVE-2026-2531 | MI Mindsdb Mindsdb | 7.3 | Feb 16 | A security vulnerability has been detected in MindsDB up to 25.14.1 |
| CVE-2025-68472 | MI Mindsdb Mindsdb | 9.1 | Jan 12 | MindsDB is a platform for building artificial intelligence from enterprise data |
| CVE-2024-45856 | MI Mindsdb Mindsdb | 5.4 | Sep 12 | A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine,… |
| CVE-2024-45855 | MI Mindsdb Mindsdb | 7.5 | Sep 12 | Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the… |
| CVE-2024-45854 | MI Mindsdb Mindsdb | 7.5 | Sep 12 | Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the… |
| CVE-2024-45853 | MI Mindsdb Mindsdb | 7.5 | Sep 12 | Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the… |
| CVE-2024-45852 | MI Mindsdb Mindsdb | 8.8 | Sep 12 | Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when… |
| CVE-2024-45851 | MI Mindsdb Mindsdb | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server |
| CVE-2024-45850 | MI Mindsdb Mindsdb | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server |
| CVE-2024-45849 | MI Mindsdb Mindsdb | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server |
| CVE-2024-45848 | MI Mindsdb Mindsdb | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server |
| CVE-2024-45847 | MI Mindsdb Mindsdb | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.11.4.2 up to 24.7.4.1 of the MindsDB platform, when one of several integrations is installed on the server |
| CVE-2024-45846 | MI Mindsdb Mindsdb | 8.8 | Sep 12 | An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server |
| CVE-2024-24759 | MI mindsdb mindsdb | 9.1 | Sep 5 | MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding |
| CVE-2024-3575 | MI Mindsdb Mindsdb | 6.1 | Apr 16 | Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb |
| CVE-2023-50731 | MI Mindsdb Mindsdb | 9.1 | Dec 22 | MindsDB is a SQL Server for artificial intelligence |
| CVE-2023-49796 | MI Mindsdb Mindsdb | 5.3 | Dec 11 | MindsDB connects artificial intelligence models to real time data |
| CVE-2023-49795 | MI Mindsdb Mindsdb | 5.3 | Dec 11 | MindsDB connects artificial intelligence models to real time data |
| CVE-2023-38699 | MI Mindsdb Mindsdb | 6.5 | Aug 4 | MindsDB's AI Virtual Database allows developers to connect any AI/ML model to any datasource |
| CVE-2023-30620 | MI Mindsdb Mindsdb | 7.5 | Apr 21 | mindsdb is a Machine Learning platform to help developers build AI solutions |
| CVE-2022-23522 | MI Mindsdb Mindsdb | 8.8 | Mar 30 | MindsDB is an open source machine learning platform |