CVE-2026-7712: MindsDB Pickle pickle.loads deserialization
A security vulnerability has been detected in MindsDB up to 26.01. Affected is the function pickle.loads of the component Pickle Handler. The manipulation leads to deserialization. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7712?
CVE-2026-7712 is considered a high severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2026-7712?
To mitigate CVE-2026-7712, update MindsDB to version 26.02 or later, which includes the necessary security patches.
What type of vulnerability is CVE-2026-7712?
CVE-2026-7712 is a deserialization vulnerability occurring in the pickle.loads function of the Pickle Handler in MindsDB.
Can CVE-2026-7712 be exploited remotely?
Yes, CVE-2026-7712 can be exploited remotely, allowing attackers to manipulate deserialization processes.
Which versions of MindsDB are affected by CVE-2026-7712?
MindsDB versions up to and including 26.01 are affected by CVE-2026-7712.