MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can bypass the allowlist control by exploiting the default empty configuration and access internal services and cloud metadata endpoints without authentication.

MindsDB versions through 26.1.0 contain a server-side request forgery (SSRF) vulnerability in the web crawler handler. Unauthenticated attackers can supply arbitrary URLs to the CrawlerTable.list function to fetch internal resources. The vulnerability stems from a default empty allowlist configuration that fails to restrict outbound requests. Attackers can exploit this to access internal services, cloud metadata endpoints, and other sensitive infrastructure without any authentication. The flaw is located in the web_handler.py integration handler and the config.py utility. This poses significant risk in cloud-hosted MindsDB deployments where metadata services like AWS IMDSv1 may be accessible. A GitHub issue and external advisory from VulnCheck have been published documenting the vulnerability.