CVE-2026-73678: MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()
MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent's scratchpad tool that calls exec() on attacker-influenced Python source without sandboxing. Attackers can first configure their own LLM API key through the unauthenticated PUT /api/v1/settings/ endpoint, then POST a prompt directing the agent to invoke the scratchpad tool with arbitrary Python code, achieving full OS command execution as the user running the desktop application and enabling access to SSH keys, stored credentials, and environment secrets.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable or restrict the Anton agent scratchpad tool behavior that uses exec() (arbitrary Python execution) when handling prompts, to prevent attacker-influenced Python source from being executed.
MindsDB Minds Platform Scratchpad tool execution via exec() = disabled - Compensating control
Block unauthenticated access to the MindsDB Minds Platform HTTP endpoints mentioned in the report (PUT /api/v1/settings/ and POST /api/v1/responses/) at the network layer (e.g., WAF/reverse proxy/ACL) so only authenticated/authorized clients can call them.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-73678?
The severity of CVE-2026-73678 is rated as critical, with a score of 10.
How do I fix CVE-2026-73678?
To fix CVE-2026-73678, upgrading to MindsDB Minds Platform version 26.2.0 or later is recommended to mitigate the vulnerability.
What systems are affected by CVE-2026-73678?
CVE-2026-73678 affects MindsDB Minds Platform versions 26.1.0 and earlier.
What type of vulnerability is CVE-2026-73678?
CVE-2026-73678 is classified as an unauthenticated remote code execution vulnerability due to code injection.
What is the attack vector for CVE-2026-73678?
CVE-2026-73678 can be exploited by unauthenticated attackers submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint.