ZeroDay Findings
Sign inSign up

Findings

CVE-2026-92207

ZDI-26-707: (0Day) MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability

Published Sep 16, 2026

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MindsDB. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-92207.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 16, 2026 · Catalog

    Detected

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of MindsDB. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-92207.

Sources

  • CVE.orgCVE-2026-92207

    Official CVE identifier

    cve.org
  • Zero Day InitiativeZDI-26-707

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of MindsDB. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-92207.

    zerodayinitiative.com