Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

mindsdb Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-86173`MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler	Exploitation statusPublic exploit	FixYes	Affected productmindsdb	Published09/05/2026	SeverityHigh
`CVE-2026-73678`MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()	Exploitation statusPublic exploit	FixNot confirmed	Affected productMinds Platform	Published08/14/2026	SeverityCritical
`CVE-2026-27483`MindsDB has Path Traversal in /api/files Leading to Remote Code Execution	Exploitation statusPublic exploit	FixNot confirmed	Affected productmindsdb	Published02/24/2026	SeverityHigh
`CVE-2026-2531`MindsDB File Upload security.py clear_filename server-side request forgery	Exploitation statusPublic exploit	FixYes	Affected productMindsDB	Published02/16/2026	SeverityMedium
`CVE-2025-68472`MindsDB has improper sanitation of filepath that leads to information disclosure and DOS	Exploitation statusPublic exploit	FixYes	Affected productmindsdb	Published01/12/2026	SeverityHigh
`CVE-2024-45856`	Exploitation statusNot known exploited	FixNot confirmed	Affected productmindsdb	Published09/12/2024	SeverityCritical
`CVE-2024-45855`	Exploitation statusNot known exploited	FixNot confirmed	Affected productmindsdb	Published09/12/2024	SeverityHigh
`CVE-2024-45854`	Exploitation statusNot known exploited	FixNot confirmed	Affected productmindsdb	Published09/12/2024	SeverityHigh
`CVE-2024-45853`	Exploitation statusNot known exploited	FixNot confirmed	Affected productmindsdb	Published09/12/2024	SeverityHigh
`CVE-2024-45852`	Exploitation statusNot known exploited	FixNot confirmed	Affected productmindsdb	Published09/12/2024	SeverityHigh
`CVE-2024-45851`	Exploitation statusNot known exploited	FixYes	Affected productmindsdb	Published09/12/2024	SeverityHigh
`CVE-2024-45850`	Exploitation statusNot known exploited	FixYes	Affected productmindsdb	Published09/12/2024	SeverityHigh
`CVE-2024-45849`	Exploitation statusPublic exploit	FixYes	Affected productmindsdb	Published09/12/2024	SeverityHigh
`CVE-2024-45848`	Exploitation statusPublic exploit	FixYes	Affected productmindsdb	Published09/12/2024	SeverityHigh
`CVE-2024-45847`	Exploitation statusPublic exploit	FixYes	Affected productmindsdb	Published09/12/2024	SeverityHigh
`CVE-2024-45846`	Exploitation statusPublic exploit	FixYes	Affected productmindsdb	Published09/12/2024	SeverityHigh
`CVE-2024-24759`MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding	Exploitation statusPublic exploit	FixNot confirmed	Affected productmindsdb	Published09/05/2024	SeverityCritical
`CVE-2024-3575`Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb	Exploitation statusPublic exploit	FixNot confirmed	Affected productmindsdb/mindsdb	Published04/16/2024	SeverityMedium
`CVE-2023-50731`MindsDB has arbitrary file write in file.py	Exploitation statusNot confirmed	FixNot confirmed	Affected productmindsdb	Published12/22/2023	SeverityCritical
`CVE-2023-49796`MindsDB Arbitrary File Write vulnerability	Exploitation statusNot confirmed	FixNot confirmed	Affected productmindsdb	Published12/11/2023	SeverityMedium
`CVE-2023-49795`MindsDB Server-Side Request Forgery vulnerability	Exploitation statusNot confirmed	FixNot confirmed	Affected productmindsdb	Published12/11/2023	SeverityMedium
`CVE-2023-38699`MindsDB 'Call to requests with verify=False disabling SSL certificate checks, security issue.' issue	Exploitation statusNot known exploited	FixNot confirmed	Affected productmindsdb	Published08/04/2023	SeverityCritical
`CVE-2023-30620`Arbitrary File Write when Extracting a Remotely retrieved Tarball in mindsdb/mindsdb	Exploitation statusPublic exploit	FixNot confirmed	Affected productmindsdb	Published04/21/2023	SeverityHigh
`CVE-2022-23522`Arbitrary File Write when Extracting Tarballs retrieved from a remote location using in mindsdb	Exploitation statusPublic exploit	FixNot confirmed	Affected productmindsdb	Published03/30/2023	SeverityHigh

24 / 24 Results

All vulnerabilities loaded

Security vulnerabilities from mindsdb

mindsdb

How many security vulnerabilities does mindsdb have?

Which mindsdb product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular mindsdb products

mindsdb

Minds Platform

mindsdb/mindsdb