# CVE-2025-68472: MindsDB - Path Traversal

> Live exploitation tracking for CVE-2025-68472 by the CrowdSec Live Exploit Tracker, built from real-world attack data crowdsourced from CrowdSec's global network.

Page: https://tracker.crowdsec.net/cves/CVE-2025-68472

## Key facts

- **Exploitation phase:** Limited Exploitation. The vulnerability is known but shows very limited attacker interest or exploitation activity.
- **CVSS score:** 8.1
- **Public exploit available:** Yes
- **Affected products:** MindsDB
- **Weaknesses:** CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
- **Tags:** enterprise_software, web_application

## Description

MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.11.1, an unauthenticated path traversal in the file upload API lets any caller read arbitrary files from the server filesystem and move them into MindsDB’s storage, exposing sensitive data. The PUT handler in file.py directly joins user-controlled data into a filesystem path when the request body is JSON and source_type is not "url". Only multipart uploads and URL-sourced uploads receive sanitization; JSON uploads lack any call to clear_filename or equivalent checks. This vulnerability is fixed in 25.11.1.

## CrowdSec analysis

[CVE-2025-68472](https://euvd.enisa.europa.eu/vulnerability/CVE-2025-68472) is a high-severity path traversal vulnerability in MindsDB versions prior to 25.11.1. An unauthenticated attacker with adjacent network access can exploit the file upload API to read arbitrary files and move them into MindsDB storage, potentially enabling sensitive data          exposure, unauthorized file manipulation, and service disruption.

CrowdSec has been tracking this vulnerability and its exploits since 9th of September 2026.

CrowdSec has not observed any significant exploitation activity targeting CVE-2025-68472 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.

Attackers target `/api/files/leak_rel` with a JSON `file` parameter containing directory-traversal sequences such as `../../../../../etc/passwd`, then query `/api/sql/query` to retrieve the exposed file through the `files.leak_rel` table.

## Timeline

- 2026-01-12: CVE Published. CVE-2025-68472 is published to NVD.
- 2026-09-09: Rule Released. CrowdSec releases a rule to detect CVE-2025-68472 exploitation attempts against the CrowdSec Network.

## References

- https://github.com/mindsdb/mindsdb/security/advisories/GHSA-qqhf-pm3j-96g7
- https://www.bluerock.io/post/cve-2025-68472-mindsdb-file-upload-path-traversal
- https://github.com/ExploreUnknowed/CVE-2025-68472/blob/main/CVE-2025-68472.py

## Live exploitation data

The [Live Exploit Tracker page](https://tracker.crowdsec.net/cves/CVE-2025-68472) follows observed exploitation activity for CVE-2025-68472. [Request an API key](https://tracker.crowdsec.net/request-api-key) for full access to its exploitation timeline, attacking IP addresses and blocklists.