CVE-2026-73678: Improper Control of Generation of Code ('Code Injection') in MindsDB Minds Platform
MindsDB Minds Platform version 26.1.0 and earlier contains a critical unauthenticated remote code execution vulnerability. Attackers can submit crafted prompts to an unprotected API endpoint, leading to execution of arbitrary OS commands via unsandboxed Python code execution. This allows full control over the system running the application, including access to sensitive credentials and environment secrets.
AI Analysis
Technical Summary
CVE-2026-73678 is an unauthenticated remote code execution vulnerability in MindsDB Minds Platform (<=26.1.0). The flaw exists because the POST /api/v1/responses/ endpoint allows attackers to submit crafted prompts that reach the Anton agent's scratchpad tool, which executes attacker-influenced Python code via exec() without sandboxing. Attackers can first configure their own LLM API key through an unauthenticated PUT /api/v1/settings/ endpoint, then use the scratchpad tool to run arbitrary OS commands as the user running the desktop application. This leads to full system compromise including access to SSH keys, stored credentials, and environment secrets.
Potential Impact
Successful exploitation results in full remote code execution without authentication, allowing attackers to execute arbitrary OS commands with the privileges of the desktop application user. This compromises confidentiality, integrity, and availability of the affected system, exposing sensitive credentials and environment secrets.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected endpoints and avoid exposing the MindsDB Minds Platform to untrusted networks.
CVE-2026-73678: Improper Control of Generation of Code ('Code Injection') in MindsDB Minds Platform
Description
MindsDB Minds Platform version 26.1.0 and earlier contains a critical unauthenticated remote code execution vulnerability. Attackers can submit crafted prompts to an unprotected API endpoint, leading to execution of arbitrary OS commands via unsandboxed Python code execution. This allows full control over the system running the application, including access to sensitive credentials and environment secrets.
CVSS v3.1
Score 10.0critical
Affected software
pkg:github/mindsdb/minds-platformRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-73678 is an unauthenticated remote code execution vulnerability in MindsDB Minds Platform (<=26.1.0). The flaw exists because the POST /api/v1/responses/ endpoint allows attackers to submit crafted prompts that reach the Anton agent's scratchpad tool, which executes attacker-influenced Python code via exec() without sandboxing. Attackers can first configure their own LLM API key through an unauthenticated PUT /api/v1/settings/ endpoint, then use the scratchpad tool to run arbitrary OS commands as the user running the desktop application. This leads to full system compromise including access to SSH keys, stored credentials, and environment secrets.
Potential Impact
Successful exploitation results in full remote code execution without authentication, allowing attackers to execute arbitrary OS commands with the privileges of the desktop application user. This compromises confidentiality, integrity, and availability of the affected system, exposing sensitive credentials and environment secrets.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected endpoints and avoid exposing the MindsDB Minds Platform to untrusted networks.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-08-13T15:15:17.100Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a7f6c01bf8831d53996d6e9
Added to database: 08/14/2026, 19:26:57 UTC
Last enriched: 08/14/2026, 19:41:06 UTC
Last updated: 08/15/2026, 01:53:54 UTC
Views: 12
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.