MindsDB Minds Platform 26.1.0 and earlier exposes an unauthenticated endpoint that routes attacker-supplied prompts into an agent tool calling exec() on unsandboxed Python, yielding full OS command execution at a CVSS 10.0.
What Is It
The flaw is a code injection issue (CWE-94) in the Minds Platform desktop application. The POST /api/v1/responses/ endpoint is unprotected, no authentication required, and prompts submitted to it reach the Anton agent's scratchpad tool, which passes attacker-influenced Python source directly to exec() without sandboxing.
The attack chain has two steps. An attacker first configures their own LLM API key through the equally unauthenticated PUT /api/v1/settings/ endpoint, then submits a prompt instructing the agent to invoke the scratchpad tool with arbitrary Python. Where the agent complies with the injected instruction, the result is OS command execution in the context of the user running the desktop application.
Why It Matters
Both CVSS v3.1 and CVSS v4.0 rate this 10.0 CRITICAL (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). Network attack vector, low complexity, no privileges, no user interaction, and scope change; the maximum on every exploitability dimension.
Because execution lands in the context of the desktop user, the reported impact extends beyond the application itself: SSH keys, stored credentials, and environment secrets are likely to be reachable, depending on what the account running the application can access. The CVSS v4.0 vector reflects this with HIGH subsequent-system confidentiality, integrity, and availability impact.
The supplied source material contains no CISA KEV entry for this CVE, so there is no confirmed active exploitation and no federal remediation deadline at this time. Exploit maturity in the CVSS v4.0 vector is NOT_DEFINED.
What's Vulnerable
- Vendor: MindsDB
- Product: Minds Platform
- Affected versions: all versions up to and including 26.1.0 (semver, default status: affected)
No CPE entries were published with this record.
Patch Status
The NVD record is in Received status, published 2026-08-14 by VulnCheck ([email protected]), and lists no fixed version or vendor-supplied patch. No required action or remediation guidance is present in the supplied data. Operators should consult the GitHub Security Advisory and VulnCheck advisory below for current fix availability.
Sources
- NVD, CVE-2026-73678 (source: [email protected], published 2026-08-14)
- MindsDB Minds Platform repository; https://github.com/mindsdb/minds-platform
- GitHub Security Advisory GHSA-jcxw-h8ph-pxpv; https://github.com/mindsdb/minds-platform/security/advisories/GHSA-jcxw-h8ph-pxpv
- VulnCheck Advisory; https://www.vulncheck.com/advisories/mindsdb-minds-platform-unauthenticated-rce-via-scratchpad-exec