Code Injection Vulnerability in MindsDB OpenBBtable

CVE-2026-92207

What is CVE-2026-92207?

The OpenBBtable component of MindsDB is susceptible to a code injection flaw, allowing remote attackers to execute arbitrary Python code on the server. This vulnerability arises from inadequate sanitization of user input used to execute code, specifically through the OpenBBtable class. Exploiting this issue requires authentication, as the attacker must operate within the context of a service account. Addressing this flaw is crucial for maintaining the integrity and security of affected installations.

References