ExploitPublished
MindsDB 25.9.1.1 · Path Traversal
Source Exploit-DB RSS Feed
0
Severity
MediumRated by Threat Radar
Data as of 10 May 2026, 02:30 UTC
What to do
AI-suggested
Until an official fix is available, restrict access to the MindsDB installation and monitor for suspicious activity related to file access. Avoid exposing vulnerable instances to untrusted networks.
Description
MindsDB 25.9.1.1 - Path Traversal
Indicators of compromise
Exploit source code
# Exploit Title: MindsDB 25.9.1.1 - Path Traversal
# Date: 06-03-2026
# Exploit Author: Lohitya Pushkar (thewhiteh4t)
# Vendor Homepage: https://mindsdb.com/
# Software Link: https://github.com/mindsdb/mindsdb
# Version: < 25.9.1.1
# Tested on: Arch Linux
# CVE : CVE-2026-27483
# Original Advisory: https://github.com/mindsdb/mindsdb/security/advisories/GHSA-4894-xqv6-vrfq
# Vulnerability Discovery: XlabAITeam
import argparse
import random
import re
import string
import sys
import requests
fr…References
Community reviews
Loading reviews…