--- cve: "CVE-2026-27483" severity: "HIGH" cvss: 8.8 epss: "11.1%" vendor: "mindsdb" kev: false exploited: false published: "2026-02-24 15:21:38" tags: [cve, security, high] source: tsecurity.de CVE-Dossier exported: "2026-09-11T16:31:55+02:00" --- # CVE-2026-27483 > 8.8 HIGH · 🧪 PoC ## Beschreibung MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a path traversal vulnerability in Mindsdb's /api/files interface, which an authenticated attacker can exploit to achieve remote command execution. The vulnerability exists in the "Upload File" module, which corresponds to the API endpoint /api/files. Since the multipart file upload does not perform security checks on the uploaded file path, an attacker can perform path traversal by using `../` sequences in the filename field. The file write operation occurs before calling clear_filename and save_file, meaning there is no filtering of filenames or file types, allowing arbitrary content to be written to any path on the server. Version 25.9.1.1 patches the issue. ## CVSS-Vektor ``` CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H ``` | Metrik | Wert | Bewertung | |---|---|---| | AV Angriffsvektor | Netzwerk | bad | | AC Komplexität | Gering | bad | | PR Privilegien | Gering | warn | | UI Interaktion | Keine | bad | | S Scope | Unverändert | good | | C Vertraulichkeit | Hoch | bad | | I Integrität | Hoch | bad | | A Verfügbarkeit | Hoch | bad | ## Exploit-Evidenz - [EDB-52547 — MindsDB 25.9.1.1 - Path Traversal](https://www.exploit-db.com/exploits/52547) ## Patch verfügbar (OSV) - 303d2ae7dc0b68b1609ac759053bad36c01e486d (Commit) - 87a44bdb2b97f963e18f10a068e1a1e2690505ef (Commit) ## Referenzen - - - --- _Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-27483) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_