mindsdb
Security Risk Profile
61
/100
highSecurity Risk Score
Comprehensive risk assessment based on 26 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 30, 2023 to present
26
Total CVEs
20
Critical+High
1
Exploited
6
Unpatched
Threat Assessment
Avg CVSS
7.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
6
Critical/High
Risk Level
61/100
high
⚠️ 1 Active Exploits🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
6High
14Medium
4Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
5Age Distribution
Common Weaknesses (CWE)
1
Code Injection
7
2
SSRF
6
3
Path Traversal
5
4
Input Validation
2
5
XSS
2
Most Affected Products
1. MindsDB MindsDB26
2. pip/mindsdb19
3. pip/MindsDB3
4. MindsDB MindsDB Minds Platform1
5. mindsdb/mindsdb1
Recent Vulnerabilities
See more →CVE-2026-73678
CVSS 10.0critical
MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()
8/14/2026🔧 No Patch
CVE-2026-7712
CVSS 2.1EPSS 0%low
MindsDB Pickle pickle.loads deserialization
5/3/2026🔧 No Patch
CVE-2026-7711
CVSS 5.5EPSS 0%medium
MindsDB Engine proc_wrapper.py exec unrestricted upload
5/3/2026🔧 No Patch
CVE-2026-27483
CVSS 8.8EPSS 0%high
MindsDB has Path Traversal in /api/files Leading to Remote Code Execution
2/24/2026⚠ Exploited
CVE-2026-2531
CVSS 7.3EPSS 0%high
MindsDB File Upload security.py clear_filename server-side request forgery
2/16/2026
CVE-2025-68472
CVSS 9.1critical
MindsDB has improper sanitation of filepath that leads to information disclosure and DOS
1/12/2026
CVE-2024-45856
CVSS 9.1critical
9/12/2024🔧 No Patch
CVE-2024-45855
CVSS 7.5high
9/12/2024🔧 No Patch
CVE-2024-45854
CVSS 7.5high
9/12/2024🔧 No Patch
CVE-2024-45853
CVSS 7.5high
9/12/2024🔧 No Patch
Monitor mindsdb in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.