Privilege escalation in Mintplex-labs Mintplex-labs/anything-llm

CVE-2024-0439

As a manager, you should not be able to modify a series of settings. In the UI this is indeed hidden as a convenience for the role since most managers would not be savvy enough to modify these settings. They can use their token to still mo…

Vulnerability class: Privilege Escalation

EPSS: 0.006 (46.6th percentile) — read the EPSS interpretation.