What is CVE-2026-32719?

CVE-2026-32719 is a medium-severity vulnerability in Mintplex-labs Anything-llm, classified under Path Traversal. CVSS score: 4.2/10. Published 2026-03-13.

How severe is CVE-2026-32719?

Medium severity. CVSS v3 base score is 4.2 out of 10.

RCE in Mintplex-labs Anything-llm

CVE-2026-32719

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, The ImportedPlugin.importCommunityItemFromUrl() function in server/utils/agents/imported.js…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.001 (24.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.2 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N.

Affected products

Mintplex-labs Anything-llm — versions <= 1.11.1

Weakness classification (CWE)

References

https://github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-rh66-4w74-cf4m (x_refsource_CONFIRM)
https://github.com/Mintplex-Labs/anything-llm/commit/6a492f038da195a5c9a239d5ca2e9f2151c25f8c (x_refsource_MISC)

Frequently asked questions

What is CVE-2026-32719?: CVE-2026-32719 is a medium-severity vulnerability in Mintplex-labs Anything-llm, classified under Path Traversal. CVSS score: 4.2/10. Published 2026-03-13.
How severe is CVE-2026-32719?: Medium severity. CVSS v3 base score is 4.2 out of 10.