Beveiligingsadvies

CVE-2026-86173

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-05 11:01:25

Laatst bijgewerkt 2026-09-08 17:22:49

Toegewezen door VulnCheck

CVSS-score 8.7

Status PUBLISHED

Beschrijving

MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty configuration and access internal services and cloud metadata endpoints without authentication.

← Alle CVE's bekijken Bekijk op cve.org ↗