https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T09:18:42.448361+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-86173 fkie_cve-2026-86173 2026-09-29T09:18:42.466449+00:00

MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty configuration and access internal services and cloud metadata endpoints without authentication.

 https://db.gcve.eu/vuln/ghsa-w6m8-h8j4-89w4 GHSA-w6m8-h8j4-89w4 2026-09-29T09:18:42.466528+00:00

MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty configuration and access internal services and cloud metadata endpoints without authentication.