MindsDB EUVD-2026-107405

Exploitation requires an authenticated session on the MindsDB instance (CVSS PR:L) and the ability to reach the OpenBBtable functionality, which involves the OpenBB integration/handler within MindsDB - a user who can create or query against an OpenBB-backed table can supply the malicious string. The core limiting factors are: (1) valid low-privilege credentials are mandatory, so purely anonymous attackers cannot exploit it directly; and (2) the vulnerable OpenBBtable code path must be reachable in the deployment. No user interaction by a victim is needed (UI:N), and the attack is fully network-based (AV:N) with low complexity (AC:L). The provided data does not specify whether the OpenBB handler is enabled by default, so defenders should verify whether that integration is present in their deployment.

This is a genuine high-priority vulnerability, though not a drop-everything emergency. The CVSS 3.0 base score of 8.8 (AV:N/AC:L/PR:L/UI:N) reflects remote, low-complexity exploitation with full CIA impact (C:H/I:H/A:H) via Python code injection (CWE-94) that yields arbitrary code execution in the context of the MindsDB service account. The single mitigating factor is PR:L - an attacker must first hold authenticated/low-privilege access to the MindsDB instance, which meaningfully narrows the exposure compared to a pre-auth RCE. Crucially, several escalation signals are MISSING rather than negative: no EPSS exploitation-probability score was provided, the CVE is NOT in CISA KEV, and no public POC was supplied in the input, so this is not currently confirmed as actively exploited. The source is Zero Day Initiative (ZDI-26-707, formerly ZDI-CAN-28388), a credible coordinated-disclosure channel, which raises confidence in the technical accuracy of the finding but does not imply in-the-wild use. No SSVC decision data was provided. Net: treat as a real, patch-promptly issue for any internet-exposed or multi-tenant MindsDB deployment, but the authentication requirement and absence of KEV/POC/EPSS signals argue against treating it as mass-exploitation-imminent.

An attacker who already possesses valid low-privilege credentials to a MindsDB instance crafts a malicious string and submits it to the OpenBBtable class, which passes it unvalidated into a Python code-execution path. Because the input is executed as Python, the attacker achieves arbitrary code execution running as the MindsDB service account, enabling data theft or host compromise. No public exploit code was identified in the provided data, and the network vector with low attack complexity (AV:N/AC:L) makes exploitation straightforward once authenticated.