ferralon-demo/mindsdb-vectordb-eval-rce

PoC

Case study: MindsDB CVE-2024-45846..45851 (builtin eval on query values in integration handlers). Demo only, not for use.

view exploit source poc_in_githubauthor ferralon-demopublished 2026-10-07catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-45846US	high8.8	2.15% (82nd)	Exploit	2024-09-12
An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specia…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.