MindsDB Weaviate integration allows arbitrary code execution via eval injection
A vulnerability in MindsDB's Weaviate integration allows authenticated attackers to execute arbitrary code by injecting Python code through embedding vector filter parameters. The flaw affects MindsDB versions v23.10.3.0 through v24.7.4.1.
What happened
A vulnerability in MindsDB's Weaviate integration allows arbitrary code execution through improper neutralization of directives in dynamically evaluated code. An authenticated attacker can exploit the flaw by injecting Python code into the embedding vector filter parameter of a SELECT WHERE clause.
The vulnerability exists in the mindsdb/integrations/handlers/weaviate_handler/weaviate_handler.py file where the eval function is used to parse the embeddings column argument without proper sanitization, allowing arbitrary Python code execution.
Index analysis
The vulnerability affects MindsDB versions v23.10.3.0 through v24.7.4.1 and has a CVSS score of 8.8, indicating high severity. Exploitation requires authentication to a MindsDB instance with the Weaviate integration installed and the presence of an embedding vector filter.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.