CVE-2025-68472: fallo de gravedad alta en mindsdb
MindsDB has improper sanitation of filepath that leads to information disclosure and DOS
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
68Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck y tiene prueba de concepto pública.
ssvc Actcvss 8.1epss 20%
de la publicación al arma2 días
Publicada en NVD12 ene
1ª PoC+2d
VulnCheck+253d
MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.11.1, an unauthenticated path traversal in the file upload API lets any caller read arbitrary files from the server filesystem and move them into MindsDB’s storage, exposing sensitive data. The PUT handler in file.py directly joins user-controlled data into a filesystem path when the request body is JSON and source_type is not "url". Only multipart uploads and URL-sourced uploads receive sanitization; JSON uploads lack any call to clear_filename or equivalent checks. This vulnerability is fixed in 25.11.1.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Productos afectados
mindsdb · mindsdbPoCs públicas encontradas — 1
vulncheckvulncheck.com/xdb/738e6d4c9a4dno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — mindsdb
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-27483HIGHMindsDB has Path Traversal in /api/files Leading to Remote Code ExecutionEPSS 11.0%CVE-2024-24759CRITICALMindsDB Vulnerable to Bypass of SSRF Protection with DNS RebindingEPSS 4.9%CVE-2024-45846HIGHCVE-2024-45846EPSS 2.1%CVE-2023-30620HIGHArbitrary File Write when Extracting a Remotely retrieved Tarball in mindsdb/mindsdbEPSS 1.0%CVE-2023-50731CRITICALMindsDB has arbitrary file write in file.pyEPSS 1.0%CVE-2022-23522HIGHArbitrary File Write when Extracting Tarballs retrieved from a remote location using in mindsdbEPSS 0.9%