{"id":"CVE-2026-92207","kind":"vulnerability","aliases":["CVE-2026-92207"],"related":[],"title":"MindsDB: authenticated user can run Python code through OpenBBtable","description":"MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MindsDB. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the OpenBBtable class. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28388.","summary":"MindsDB's OpenBBtable class passes a user-supplied string to Python execution without validating it. An attacker with a valid account can run arbitrary code as the MindsDB service account.","severity":"high","cvss":8.8,"epss":0.00699,"exploited":false,"exploited_at":null,"products":[{"name":"mindsdb","fixed":[],"affected":"25.10.1 (later versions unknown)","ecosystem":"pypi"},{"name":"mindsdb","fixed":["26.1.0 (unconfirmed)"],"affected":"<= 25.10.1 (up to < 26.1.0 probable)","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["ai-tooling","mindsdb","python","rce","self-hosted"],"not_affected_if":["auth-required"],"how_to_check":"pip show mindsdb: 25.10.1 and earlier are affected; versions before 26.1.0 are probably affected. Check with: grep -n eval mindsdb/integrations/handlers/openbb_handler/openbb_tables.py in site-packages. Check SHOW DATABASES for an openbb engine datasource.","fix":"Upgrade pypi:mindsdb to 26.1.0 or later (likely; verify that openbb_tables.py in your install no longer calls eval, and that _resolve_openbb_command exists). Until then, remove or disable the OpenBB integration and restrict access to MindsDB.","status":"open","published_at":"2026-10-21T18:17:31+00:00","first_seen_at":"2026-10-23T21:57:29+00:00","triaged_at":"2026-10-23T22:32:59+00:00","updated_at":"2026-10-24T13:15:54+00:00","category":"ai-tooling","confidence":0.65,"triage":{"at":"2026-10-23T22:32:59Z","model":"claude-haiku-5-5","output":{"fix":"Upgrade pypi:mindsdb past 25.10.1 once a fixed version is published; the fixed version is unknown in the sources.","reach":"network","title":"MindsDB: authenticated user can run Python code through OpenBBtable","impact":"high","summary":"MindsDB's OpenBBtable class passes a user-supplied string to Python execution without validating it. An attacker with a valid account can run arbitrary code as the MindsDB service account.","category":"ai-tooling","who_cares":["mindsdb","python","self-hosted"],"confidence":0.6,"needs_auth":"yes","worst_case":"Arbitrary code runs as the MindsDB service account on the server.","analyst_note":"Find the fixed MindsDB version and an endpoint or SQL path that reaches OpenBBtable; check the ZDI advisory for the ZDI-CAN-28388 details.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["auth-required"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000491,"input_tokens":3027,"output_tokens":377,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the fixed MindsDB version and an endpoint or SQL path that reaches OpenBBtable; check the ZDI advisory for the ZDI-CAN-28388 details.","search":"'-2026':11A,14A '-92207':12A,15A '28388':137C 'account':48B,57B,132C 'affect':76C 'ai':19B 'ai-tool':18B 'allow':68C 'arbitrari':51B,73C 'attack':44B,70C,118C 'authent':2A,80C 'class':30B,94C 'code':7A,52B,60C,63C,74C,116C,125C 'context':128C 'cve':10A,13A 'execut':39B,64C,72C,114C,124C 'exist':90C 'exploit':84C 'flaw':89C 'host':26B 'inject':61C 'instal':77C 'issu':96C 'lack':100C 'leverag':120C 'mindsdb':1A,16A,17A,21B,27B,55B,58C,79C 'openbbt':9A,29B,59C,93C 'pass':31B 'proper':102C 'python':6A,22B,38B,115C 'rce':23B 'remot':62C,69C 'requir':82C 'result':97C 'run':5A,50B 'self':25B 'self-host':24B 'servic':56B,131C 'specif':88C 'string':36B,109C 'suppli':35B,108C 'tool':20B 'use':111C 'user':3A,34B,107C 'user-suppli':33B,106C 'valid':41B,47B,103C 'vulner':65C,67C,86C,122C 'within':91C 'without':40B 'zdi':135C 'zdi-can':134C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T18:17:31+00:00","kev":null,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"zdi-disclosures@trendmicro.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-92207","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92207","severity":null,"published_at":"2026-10-21T18:17:31+00:00","modified_at":"2026-10-21T18:17:31+00:00","first_seen_at":"2026-10-23T21:57:29+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-92207:193","url":null,"severity":null,"published_at":"2026-10-23T22:16:52+00:00","modified_at":"2026-10-23T22:16:52+00:00","first_seen_at":"2026-10-23T22:16:52+00:00","fetched_at":"2026-10-23T22:16:52+00:00","note":"ZDI-26-707 (0day, vendor never responded; reported 2025-11-20, published 2026-09-16) and CVE record: affected 25.10.1 only listed, no fixed version. Did not verify default reachability of OpenBBtable or search social."},{"source":"analyst","external_id":"CVE-2026-92207:249","url":null,"severity":null,"published_at":"2026-10-23T22:33:59+00:00","modified_at":"2026-10-23T22:33:59+00:00","first_seen_at":"2026-10-23T22:33:59+00:00","fetched_at":"2026-10-23T22:33:59+00:00","note":"New: upstream fix found. PR #12290 (merged 2026-03-30 into the release branch, commit 100e10c) removes eval() in OpenBBtable.select() and adds _resolve_openbb_command. ZDI called it a 0day, but the fix predates the CVE. Release containing it is not confirmed: v26.1.0 (2026-04-23) is the likely first one, but its notes page did not list the PR, and v26.0.1 (2026-03-03) predates the fix. Query path: the sink is OpenBBtable.select(), reached by SELECT against an OpenBB datasource; the exact endpoint is not confirmed."},{"source":"epss","external_id":"CVE-2026-92207","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-92207","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:54+00:00","fetched_at":"2026-10-24T13:15:54+00:00","note":null}],"documents":[{"id":1365,"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-707/","title":"ZDI-26-707 MindsDB OpenBBtable","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":1366,"url":"https://www.cve.org/CVERecord?id=CVE-2026-92207","title":"CVE record CVE-2026-92207","kind":"other","source":"analyst","text":null,"published_at":null,"relation":"describes","confidence":null,"note":null},{"id":1504,"url":"https://github.com/mindsdb/mindsdb/pull/12290","title":"PR #12290 Fix OpenBB command execution by removing eval","kind":"issue","source":"analyst","text":null,"published_at":null,"relation":"fix","confidence":null,"note":null},{"id":1505,"url":"https://github.com/mindsdb/mindsdb/releases/tag/v26.1.0","title":"MindsDB v26.1.0","kind":"release","source":"analyst","text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}