CVE-2026-2531: MindsDB SSRF Vulnerability in File Upload Functionality
Summary
CVE-2026-2531: MindsDB affected by a SSRF vulnerability. Affects mindsdb versions < 25.14.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MindsDB is an open-source machine learning platform that simplifies the process of integrating machine learning into applications. It allows users to create, train, and deploy machine learning models using SQL-like queries. However, versions up to 25.14.1 are vulnerable to a server-side request forgery (SSRF) vulnerability, which can be exploited by attackers to manipulate server requests.
Vulnerability Detail
The vulnerability arises from improper handling of file uploads in the clear_filename function located in mindsdb/utilities/security.py. This flaw allows an attacker to craft requests that can be sent to internal services, potentially exposing sensitive data or leading to further exploitation of the server. The SSRF vulnerability can be exploited remotely, making it a significant risk for users of affected MindsDB versions.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can restrict access to internal services from the MindsDB server or implement additional validation on file uploads to prevent unauthorized requests. However, this is not a substitute for applying the patch.
Conclusion
The SSRF vulnerability in MindsDB versions up to 25.14.1 poses a significant risk to users, allowing attackers to manipulate server requests. It is crucial to update to the patched version 25.14.2 or later to mitigate this risk. Temporary workarounds can help, but they do not replace the need for an update.
See every vulnerability recorded for mindsdb →
FAQ
Server-side request forgery (SSRF) is a vulnerability that allows an attacker to send crafted requests from the server to internal or external resources, potentially leading to data exposure or further attacks.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability can lead to unauthorized access to internal services, data leakage, and further attacks on the server.
Yes, you can implement network restrictions to limit access to internal services and enhance validation on file uploads as a temporary measure.
The CVSS score of this vulnerability is 6.3, indicating a moderate level of severity.
References
Related vulnerabilities
Recent vulnerabilities recorded for mindsdb.
