CVE-2026-4507 | Mindinventory MindSQL up to 0.2.1 mindsql_core.py ask_db sql injection

A vulnerability classified as critical was found in Mindinventory MindSQL up to 0.2.1. The affected element is the function ask_db of the file mindsql/core/mindsql_core.py. Executing a manipulation can lead to sql injection.

This vulnerability is tracked as CVE-2026-4507. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.