CVE-2025-68472: MindsDB Path Traversal Vulnerability Leading to Information Disclosure and DOS
Summary
CVE-2025-68472: MindsDB has improper sanitation of filepath that leads to information disclosure and DOS. Affects mindsdb versions < 25.11.1. Fixed in 25.11.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
MindsDB is an open-source machine learning platform that simplifies the process of integrating machine learning into applications. It allows users to create, train, and deploy machine learning models using SQL-like queries. However, it has been found to have a critical vulnerability that allows unauthorized users to exploit its file upload API, leading to potential data breaches.
Vulnerability Detail
The vulnerability arises from an unauthenticated path traversal in the file upload API of MindsDB. The PUT handler in the file.py file does not properly validate user input when constructing filesystem paths. This allows attackers to specify absolute paths, enabling them to read arbitrary files from the server's filesystem and move them into MindsDB's storage. The implications of this vulnerability are severe, as it can lead to the exposure of sensitive data such as credentials and configuration secrets. The vulnerability is classified under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), CWE-23 (Relative Path Traversal), and CWE-36 (Absolute Path Traversal).
How To Fix
Latest published version: 26.1.0 as of 22 Oct 2026
pip install --upgrade "mindsdb==26.1.0"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
25.11.1
This is the first release that contains the fix.
pip install --upgrade "mindsdb==25.11.1"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the file upload API for JSON uploads until the package is updated. Instead, use multipart uploads or URL-sourced uploads, which have proper sanitization in place.
Conclusion
The CVE-2025-68472 vulnerability in MindsDB poses a significant risk due to improper sanitation of file paths in the file upload API. Users are strongly advised to update to the patched version to mitigate the risk of information disclosure and denial of service.
See every vulnerability recorded for mindsdb →
FAQ
The CVSS score of this vulnerability is 8.1, indicating a high severity level.
Yes, any user who can access the REST API can exploit this vulnerability to read and exfiltrate arbitrary files.
Attackers can potentially access any file that the MindsDB process has permission to read, including sensitive files like configuration secrets and credentials.
Yes, you can use Vulert to monitor and alert in real-time for open-source vulnerabilities in your software. You can check if your application is affected by this vulnerability using the Vulert playground.
If you cannot update MindsDB right away, avoid using the vulnerable file upload API for JSON uploads and consider using multipart uploads or URL-sourced uploads instead.
References
Related vulnerabilities
Recent vulnerabilities recorded for mindsdb.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
