CVE-2026-86173— MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler
Quick assessment
Affected
mindsdb mindsdb
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
MindsDB是MindsDB公司开源的一款为AI代理与大语言模型打造的联合查询引擎。 MindsDB 26.1.0及之前版本存在服务端请求伪造漏洞，该漏洞源于Web爬虫处理程序存在服务端请求伪造问题，可能导致未经身份验证的攻击者通过向CrawlerTable.list提供调用者控制的URL获取任意URL，并利用默认空配置绕过白名单控制访问内部服务和云元数据端点。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-86173
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler
Source: CVE Program / CVE List V5
Vulnerability Description
MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty configuration and access internal services and cloud metadata endpoints without authentication.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Vulnerability Title
MindsDB 服务端请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MindsDB是MindsDB公司开源的一款为AI代理与大语言模型打造的联合查询引擎。 MindsDB 26.1.0及之前版本存在服务端请求伪造漏洞，该漏洞源于Web爬虫处理程序存在服务端请求伪造问题，可能导致未经身份验证的攻击者通过向CrawlerTable.list提供调用者控制的URL获取任意URL，并利用默认空配置绕过白名单控制访问内部服务和云元数据端点。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-86173
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-86173
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-86173 (1)
Vendor Advisories for CVE-2026-86173 (1)
Proof of Concept for CVE-2026-86173 (1)
Other References for CVE-2026-86173 (1)
IV. Related Vulnerabilities
Same product: mindsdb
-
CVE-2026-92207
MindsDB OpenBBtable Code Injection Remote Code Execution Vul -
CVE-2026-7712
MindsDB Pickle pickle.loads deserialization -
CVE-2026-7711
MindsDB Engine proc_wrapper.py exec unrestricted upload -
CVE-2026-27483
MindsDB has Path Traversal in /api/files Leading to Remote C -
CVE-2026-2531
MindsDB File Upload security.py clear_filename server-side r
Same vendor: mindsdb
-
CVE-2026-92207
MindsDB OpenBBtable Code Injection Remote Code Execution Vul -
CVE-2026-73678
MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scrat -
CVE-2026-27483
MindsDB has Path Traversal in /api/files Leading to Remote C -
CVE-2025-68472
MindsDB has improper sanitation of filepath that leads to in -
CVE-2024-45856
MindsDB 安全漏洞
Same weakness: CWE-918
-
CVE-2026-114730
Roundcube 1.6/1.7 SSRF 过滤器绕过漏洞 -
CVE-2026-114634
WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTyp -
CVE-2026-87953
SAML SSO - Service Provider - Moderately critical - Server -
CVE-2026-114374
leomoon-studios wiki-go fetch-metadata Endpoint metadata_api -
CVE-2026-114362
HarnessRouter Targets Test Endpoint app.py server-side reque
V. Comments for CVE-2026-86173
No comments yet