mindsdb vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-92207 MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability.High 8.8 · Oct 21, 2026
• CVE-2026-86173 MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary High 8.7 · Sep 5, 2026
• CVE-2026-73678 MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execuCritical 10 · Aug 14, 2026
• CVE-2026-27483 MindsDB is a platform for building artificial intelligence from enterprise data.High 8.8 · Feb 24, 2026
• CVE-2025-68472 MindsDB is a platform for building artificial intelligence from enterprise data.High 8.1 · Jan 12, 2026
• CVE-2024-45856 A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerCritical 9 · Sep 12, 2024
• CVE-2024-45855 Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbiHigh 7.1 · Sep 12, 2024
• CVE-2024-45854 Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbiHigh 7.1 · Sep 12, 2024
• CVE-2024-45853 Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbiHigh 7.1 · Sep 12, 2024
• CVE-2024-45852 Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code High 8.8 · Sep 12, 2024
• CVE-2024-45851 An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is instHigh 8.8 · Sep 12, 2024
• CVE-2024-45850 An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is instHigh 8.8 · Sep 12, 2024
• CVE-2024-45849 An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is instHigh 8.8 · Sep 12, 2024
• CVE-2024-45848 An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on theHigh 8.8 · Sep 12, 2024
• CVE-2024-45847 An arbitrary code execution vulnerability exists in versions 23.11.4.2 up to 24.7.4.1 of the MindsDB platform, when one of several integrations is installed on High 8.8 · Sep 12, 2024
• CVE-2024-45846 An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on theHigh 8.8 · Sep 12, 2024
• CVE-2024-24759 MindsDB is a platform for building artificial intelligence from enterprise data.Critical 9.3 · Sep 5, 2024
• CVE-2023-50731 MindsDB is a SQL Server for artificial intelligence.Critical 9.1 · Dec 22, 2023
• CVE-2023-38699 MindsDB's AI Virtual Database allows developers to connect any AI/ML model to any datasource.Critical 9.1 · Aug 4, 2023
• CVE-2023-30620 mindsdb is a Machine Learning platform to help developers build AI solutions.High 7.5 · Apr 21, 2023
• CVE-2022-23522 MindsDB is an open source machine learning platform.High 8.5 · Mar 30, 2023