Executive brief
MindsDB is a platform that enables users to query and integrate data from various sources, including the ability to crawl web content. This vulnerability allows unauthenticated attackers to make the MindsDB server fetch arbitrary URLs, potentially accessing internal services, private networks, and cloud metadata endpoints without permission. An attacker could exploit this to exfiltrate sensitive configuration data, access internal APIs, or pivot to other systems on the network.
Technical details
MindsDB versions through 26.1.0 contain a server-side request forgery (SSRF) vulnerability in the web crawler handler's CrawlerTable.list method. The vulnerability exists because the code retrieves URLs from user-supplied filter conditions and passes them to crawling functions with insufficient validation. The allowlist control (`web_crawling_allowed_sites`) defaults to an empty configuration, which fails to restrict requests. An unauthenticated attacker can bypass this protection by providing arbitrary URLs in the `url` parameter, allowing them to access internal services, private cloud metadata endpoints, and other restricted resources. The vulnerable code directly uses caller-controlled URLs without proper allowlist enforcement when the default empty configuration is present.
Affected products
- MindsDB MindsDB through 26.1.0
Timeline
- 2026-09-05: disclosed