CVE-2026-86173

MindsDB through version 26.1.0 contains a server-side request forgery flaw (CWE-918) in its web crawler handler, where an unauthenticated attacker can supply caller-controlled URLs to CrawlerTable.list to make the server fetch arbitrary URLs. The flaw is exacerbated by the crawler's URL allowlist defaulting to an empty configuration, which lets attackers bypass allowlist controls entirely and reach internal-only services as well as cloud metadata endpoints (e.g., 169.254.169.254) without any credentials. Successful exploitation yields a high confidentiality impact, since responses from internal services and cloud instance metadata — which can include cloud credentials — can be disclosed to the attacker, though the integrity and availability of the MindsDB instance itself are not impacted. Any deployment of MindsDB up to and including 26.1.0 that exposes the crawler/SQL interface over the network is affected, with cloud and containerized environments most at risk because their metadata endpoints are directly reachable. No public proof-of-concept or in-the-wild exploitation is currently known, and EPSS assigns a 0.4% probability of exploitation within the next 30 days.

What to do: Upgrade MindsDB to a release later than 26.1.0 as soon as a fixed version is published. As interim mitigation, configure a non-empty URL allowlist for the crawler handler, restrict unauthenticated network access to the MindsDB HTTP/SQL interface, and use network policy or a firewall to block the MindsDB host from reaching cloud metadata endpoints (169.254.169.254) and other internal-only services. Review logs and egress traffic for unexpected outbound requests initiated by MindsDB to detect prior exploitation.