Unauthenticated Remote Code Execution in MindsDB Minds Platform by MindsDB

CVE-2026-73678

What is CVE-2026-73678?

The MindsDB Minds Platform, up to version 26.1.0, is susceptible to an unauthenticated remote code execution vulnerability. This security flaw allows attackers to submit specially crafted prompts to the unprotected POST /api/v1/responses/ endpoint. By leveraging this endpoint, attackers can manipulate the Anton agent's scratchpad tool to execute arbitrary OS commands due to the misuse of the exec() function that operates on user-influenced Python scripts without adequate sandboxing. Moreover, attackers can configure their own LLM API key through an unauthenticated PUT request to /api/v1/settings/ before posting a prompt that directs the agent to execute malicious Python code. This exploitation could lead to complete OS command execution under the context of the user running the application, compromising sensitive data such as SSH keys, stored credentials, and environment configurations.

References