CVE Tools
Track your stack

Mindsdb

12 CVEs tracked since 2024. Since Sep 2024, none of them reached CISA KEV.

Mindsdb CVEs per month

Sep 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Mindsdb CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-09120
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Mindsdb's monthly top three, with their CVEs summed over those months.

  1. Mindsdb121 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Mindsdb.

  1. CVE-2026-92207MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability8.8
  2. CVE-2026-86173MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler7.5
  3. CVE-2026-73678MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()10.0
  4. CVE-2026-27483MindsDB has Path Traversal in /api/files Leading to Remote Code Execution8.8
  5. CVE-2026-2531MindsDB File Upload security.py clear_filename server-side request forgery6.3
  6. CVE-2025-68472MindsDB has improper sanitation of filepath that leads to information disclosure and DOS8.1
  7. CVE-2024-45854MindsDB Deserialization of Untrusted Data vulnerability7.1
  8. CVE-2024-45847MindsDB Eval Injection vulnerability8.8
  9. CVE-2024-45856A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project,...9.0
  10. CVE-2024-45855Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when usi...7.1
  11. CVE-2024-45853Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when use...7.1
  12. CVE-2024-45852Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.8.8
  13. CVE-2024-45851An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases cr...8.8
  14. CVE-2024-45850An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases cr...8.8
  15. CVE-2024-45849An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases cr...8.8

The record

Peak rank
#58 in Sep 2024
Busiest month shown
Sep 2024, 12 CVEs
Months with a KEV entry
0 since Sep 2024
Monthly snapshots
1 since 2024
Mindsdb's full record, month by month