A weakness has been identified in MindsDB up to 26.01. This impacts the function exec of the file mindsdb/integrations/handlers/byom_handler/proc_wrapper.py of …

A critical vulnerability has been identified in MindsDB up to version 26.01 affecting the exec function in the BYOM handler component. The flaw allows for unrestricted file uploads and can be exploited remotely. Public exploits are available making this vulnerability particularly dangerous. The vulnerability is located in the proc_wrapper.py file of the Engine Handler component. The vendor was notified but has not responded to the disclosure.