CVE-2026-27483: MindsDB path traversal in /api/files leading to RCE

CVE-2026-27483 · Severity: high · CVSS 8.8 · Published 2026-02-24

MindsDB, an open-source platform for building AI from enterprise data, contains a vulnerability in its file upload interface. An authenticated attacker can use this flaw to write or overwrite sensitive files on the server's filesystem. In practice, this allows an attacker to gain full control over the server by overwriting system scripts and executing arbitrary commands, potentially leading to data theft or complete service disruption.

Technologies: mindsdb (PyPI). Vendors: PyPI.

Quick answers

Is CVE-2026-27483 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-27483 being exploited in the wild.
How severe is CVE-2026-27483?
High severity, with a CVSS score of 8.8, published 24 February 2026.
Which products and versions are affected?
mindsdb (PyPI) < 25.9.1.1, ECOSYSTEM:introduced=0,fixed=25.9.1.1.
Is there a fix for CVE-2026-27483?
Yes. mindsdb (PyPI): upgrade to 25.9.1.1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-27483 attacked?
It is attacked over the network, in a software library.
Am I affected by CVE-2026-27483?
Check whether you run mindsdb (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • mindsdb (PyPI): upgrade to 25.9.1.1 or later
    pip install "mindsdb>=25.9.1.1"

Technical details

A path traversal vulnerability exists in the 'Upload File' module of MindsDB, specifically within the PUT method of the /api/files endpoint in mindsdb/api/http/namespaces/file.py. The application fails to sanitize the 'filename' parameter in multipart/form-data requests, allowing the use of '../' sequences to write files outside the intended temporary directory. An authenticated attacker can exploit this to overwrite critical Python library files (such as pip's __init__.py). By subsequently triggering a handler installation via the /<handler_name>/install endpoint, which invokes pip via subprocess.Popen, the attacker can execute arbitrary Python code with the privileges of the MindsDB process. This issue is fixed in version 25.9.1.1.

Affected products

  • MindsDB mindsdb < 25.9.1.1

Identifiers

  • CVE-2026-27483
  • GHSA-4894-xqv6-vrfq
  • PYSEC-2026-2205

Timeline

  • 2026-02-22: disclosed: Vulnerability published in mindsdb/minds repository
  • 2026-02-24: advisory: GitHub Advisory and NVD entry published
  • 2026-02-24: patched: Version 25.9.1.1 released

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.