01 Record

CVE-2026-73678

MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()

CriticalPUBLISHEDCNA: VulnCheck

Base score10.0 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

02 Description

MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()

Published: 2026-08-14 18:49Z1 HR AGO
Last updated: 2026-08-14 18:49Z1 HR AGO
Reserved: 2026-08-13
Assigning CNA: VulnCheck
Record state: PUBLISHED
Severity: Critical (CVSS 10.0)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Weaknesses: CWE-94
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 03cd166a718c25f5f17976bea4a62ddeeee96cf50972f381bdc4cb70a475f4eb

VendorProductVersionsPlatforms

MindsDBMinds Platform0 to 26.1.0—