minds_platform vulnerabilities

CVEs whose affected-version data names the minds_platform package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-73678Critical· 10.0PoC

1mo ago

MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()

MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POS…

▾ AbyssalMindsDB · Minds PlatformEPSS 1.1%via CVEORG