ZDI-CAN-28388 HIGH 8.8 Overdue Nov 20, 2025

MindsDB

MindsDB is an open-source machine learning and AI database platform that allows developers to build AI applications with simplified data access. The vulnerability is a high-severity remote attack requiring only low-level user authentication that could allow an attacker to completely compromise the system through data theft, system modification, and service disruption with no user interaction needed. Security teams should monitor for exploitation attempts against MindsDB instances and prioritize patching once the vendor releases a fix by the March 2026 deadline.

Advisory Details
Researcher Discovered by: Peter Girnus (@gothburz), Demeng Chen, and Brandon Niemczyk of Trend Zero Day Initiative
Reported November 20, 2025
Deadline March 20, 2026 28d overdue
CVSS Vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy