CVE-2026-92207

HighCVSS 8.8

Published: 21/10/2026(UTC)Updated: 30/10/2026(UTC)Translated: 30/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.70%

53th percentile - higher than 53% of all known CVEs

Summary

MindsDB contains a code injection remote code execution vulnerability in the OpenBBtable class. Authentication is required; the flaw is due to lack of validation of a user-supplied string before using it to execute Python code, allowing an attacker to execute code in the context of the service account.

Risk Assessment

An authenticated attacker can execute arbitrary code in the context of the MindsDB service account, potentially leading to privilege escalation and system compromise. However, valid credentials are required.

Recommendation

Update MindsDB to a patched version or restrict access to the OpenBBtable functionality. Apply least privilege to the service account.

Other vulnerabilities in MindsDB

CVE-2026-86173High
MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty configuration and access internal services and cloud metadata endpoints without authentication.

Original NVD description (English source)

MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MindsDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the OpenBBtable class. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28388.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS