Skip to content
Fencer Vulns
high 8.8

CVE-2026-27483 in the critical feed json

MindsDB has Path Traversal in /api/files Leading to Remote Code Execution

published 2026-02-24 8 mo ago modified 2026-07-13 3 mo ago also EUVD-2026-8466 , GHSA-4894-xqv6-vrfq , PYSEC-2026-2205

cvss
8.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
11.0%
EPSS 11.0% chance of exploitation in 30 days, percentile 95%
public exploits
1
Exploit-DB, plus a Nuclei check

Summary

MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a path traversal vulnerability in Mindsdb's /api/files interface, which an authenticated attacker can exploit to achieve remote command execution. The vulnerability exists in the "Upload File" module, which corresponds to the API endpoint /api/files. Since the multipart file upload does not perform security checks on the uploaded file path, an attacker can perform path traversal by using `../` sequences in the filename field. The file write operation occurs before calling clear_filename and save_file, meaning there is no filtering of filenames or file types, allowing arbitrary content to be written to any path on the server. Version 25.9.1.1 patches the issue.

Patch / fix

  • pypi mindsdb 25.9.1.1
  • mindsdb mindsdb 25.9.1.1

Timeline

  1. Published
  2. First public exploit (EDB-52547)

CISA SSVC

Exploitation
Proof of concept is public
Automatable
no
Technical impact
total
Assessed
8 mo ago

Exploit prediction

10.99% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-52547 MindsDB 25.9.1.1 - Path Traversal webapps, 2026-05-04
  • Nuclei template MindsDB - Remote Code Execution nuclei detection template
  • github.com https://github.com/mindsdb/mindsdb/security/advisories/GHSA-4894-xqv6-vrfq referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
GitHub 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
OSV 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected packages

ecosystem package affected fixed in
pypi mindsdb
<25.9.1.1
25.9.1.1

Affected products

  • mindsdb mindsdb

Classification

Weakness
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.