CVE-2026-48116 | High | 7.5 | 2026-05-28 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, the filesystem-sea… |
CVE-2026-47713 | Low | 2.0 | 2026-05-28 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, an approved mobile… |
CVE-2026-45403 | Low | 2.0 | 2026-05-28 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, the AnythingLLM ag… |
CVE-2026-42456 | Medium | 4.3 | 2026-05-08 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, GET /api/w… |
CVE-2026-41318 | Medium | 5.4 | 2026-04-24 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, AnythingLL… |
CVE-2026-5627 | High | 7.2 | 2026-04-07 | A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within the `AgentFlows` component. The vulnerability ar… |
CVE-2026-32719 | Medium | 4.2 | 2026-03-16 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, The Imported… |
CVE-2026-32717 | Low | 2.7 | 2026-03-16 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, in multi-use… |
CVE-2026-32715 | Low | 3.8 | 2026-03-16 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, The two gene… |
CVE-2026-32628 | High | 8.8 | 2026-03-16 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL inject… |
CVE-2026-32626 | Critical | 9.6 | 2026-03-16 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, AnythingLLM… |
CVE-2026-32617 | High | 7.1 | 2026-03-16 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, On default i… |
CVE-2026-24478 | High | 7.2 | 2026-01-27 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.10.0, a critical… |
CVE-2026-24477 | High | 7.5 | 2026-01-27 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. If AnythingLLM prior to version 1.1… |
CVE-2026-21484 | Medium | 5.3 | 2026-01-03 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to commit e287fab56089cf8fcea… |
CVE-2025-63390 | Medium | 5.3 | 2025-12-18 | An authentication bypass vulnerability exists in AnythingLLM v1.8.5 in via the /api/workspaces endpoint. The endpoint fails to implement proper authentication… |
CVE-2024-8251 | Medium | 5.3 | 2025-03-20 | A vulnerability in mintplex-labs/anything-llm prior to version 1.2.2 allows for Prisma injection. The issue exists in the API endpoint "/embed/:embedId/stream-… |
CVE-2024-8249 | High | 7.5 | 2025-03-20 | mintplex-labs/anything-llm version git 6dc3642 contains an unauthenticated Denial of Service (DoS) vulnerability in the API for the embeddable chat functionali… |
CVE-2024-8248 | High | 7.2 | 2025-03-20 | A vulnerability in the normalizePath function in mintplex-labs/anything-llm version git 296f041 allows for path traversal, leading to arbitrary file read and w… |
CVE-2024-8196 | Critical | 9.8 | 2025-03-20 | In mintplex-labs/anything-llm v1.5.11 desktop version for Windows, the application opens server port 3001 on 0.0.0.0 with no authentication by default. This vu… |
CVE-2024-7771 | Medium | 6.5 | 2025-03-20 | A vulnerability in the Dockerized version of mintplex-labs/anything-llm (latest, digest 1d9452da2b92) allows for a denial of service. Uploading an audio file w… |
CVE-2024-6842 | High | 7.5 | 2025-03-20 | In version 1.5.5 of mintplex-labs/anything-llm, the `/setup-complete` API endpoint allows unauthorized users to access sensitive system settings. The data retu… |
CVE-2024-13060 | Medium | 4.3 | 2025-03-20 | A vulnerability in AnythingLLM Docker version 1.3.1 allows users with 'Default' permission to access other users' profile pictures by changing the 'id' paramet… |
CVE-2024-10513 | High | 7.2 | 2025-03-20 | A path traversal vulnerability exists in the 'document uploads manager' feature of mintplex-labs/anything-llm, affecting the latest version prior to 1.2.2. Thi… |
CVE-2024-10109 | High | 8.3 | 2025-03-20 | A vulnerability in the mintplex-labs/anything-llm repository, as of commit 5c40419, allows low privilege users to access the sensitive API endpoint "/api/syste… |
CVE-2024-13059 | High | 7.2 | 2025-02-10 | A vulnerability in mintplex-labs/anything-llm prior to version 1.3.1 allows for path traversal due to improper handling of non-ASCII filenames in the multer li… |
CVE-2024-7783 | High | 7.5 | 2024-10-29 | mintplex-labs/anything-llm version latest contains a vulnerability where sensitive information, specifically a password, is improperly stored within a JWT (JSO… |
CVE-2024-3279 | Critical | 9.1 | 2024-08-12 | An improper access control vulnerability exists in the mintplex-labs/anything-llm application, specifically within the import endpoint. This vulnerability allo… |
CVE-2024-5216 | High | 7.5 | 2024-06-25 | A vulnerability in mintplex-labs/anything-llm allows for a Denial of Service (DoS) condition due to uncontrolled resource consumption. Specifically, the issue… |
CVE-2024-5213 | Medium | 6.5 | 2024-06-20 | In mintplex-labs/anything-llm versions up to and including 1.5.3, an issue was discovered where the password hash of a user is returned in the response after l… |
CVE-2024-5208 | Medium | 6.5 | 2024-06-19 | An uncontrolled resource consumption vulnerability exists in the `upload-link` endpoint of mintplex-labs/anything-llm. This vulnerability allows attackers to c… |
CVE-2024-5211 | High | 7.2 | 2024-06-12 | A path traversal vulnerability in mintplex-labs/anything-llm allowed a manager to bypass the `normalizePath()` function, intended to defend against path traver… |
CVE-2024-3166 | Critical | 9.6 | 2024-06-06 | A Cross-Site Scripting (XSS) vulnerability exists in mintplex-labs/anything-llm, affecting both the desktop application version 1.2.0 and the latest version of… |
CVE-2024-3153 | Medium | 6.5 | 2024-06-06 | mintplex-labs/anything-llm is affected by an uncontrolled resource consumption vulnerability in its upload file endpoint, leading to a denial of service (DOS)… |
CVE-2024-3150 | High | 8.8 | 2024-06-06 | In mintplex-labs/anything-llm, a vulnerability exists in the thread update process that allows users with Default or Manager roles to escalate their privileges… |
CVE-2024-3149 | High | 8.8 | 2024-06-06 | A Server-Side Request Forgery (SSRF) vulnerability exists in the upload link feature of mintplex-labs/anything-llm. This feature, intended for users with manag… |
CVE-2024-3110 | High | 8.7 | 2024-06-06 | A stored Cross-Site Scripting (XSS) vulnerability exists in the mintplex-labs/anything-llm application, affecting versions up to and including the latest befor… |
CVE-2024-3102 | Medium | 5.3 | 2024-06-06 | A JSON Injection vulnerability exists in the `mintplex-labs/anything-llm` application, specifically within the username parameter during the login process at t… |
CVE-2024-3152 | High | 8.8 | 2024-06-06 | mintplex-labs/anything-llm is vulnerable to multiple security issues due to improper input validation in several endpoints. An attacker can exploit these vulne… |
CVE-2024-3104 | Critical | 9.8 | 2024-06-06 | A remote code execution vulnerability exists in mintplex-labs/anything-llm due to improper handling of environment variables. Attackers can exploit this vulner… |
CVE-2024-3033 | Critical | 9.4 | 2024-06-06 | An improper authorization vulnerability exists in the mintplex-labs/anything-llm application, specifically within the '/api/v/' endpoint and its sub-routes. Th… |
CVE-2024-4084 | High | 7.5 | 2024-06-05 | A Server-Side Request Forgery (SSRF) vulnerability exists in the latest version of mintplex-labs/anything-llm, allowing attackers to bypass the official fix in… |
CVE-2024-4287 | High | 7.2 | 2024-05-20 | In mintplex-labs/anything-llm, a vulnerability exists due to improper input validation in the workspace update process. Specifically, the application fails to… |
CVE-2024-4284 | Medium | 4.9 | 2024-05-19 | A vulnerability in mintplex-labs/anything-llm allows for a denial of service (DoS) condition through the modification of a user's `id` attribute to a value of… |
CVE-2024-2913 | Medium | 6.5 | 2024-05-07 | A race condition vulnerability exists in the mintplex-labs/anything-llm repository, specifically within the user invite acceptance process. Attackers can explo… |
CVE-2024-3029 | High | 8.0 | 2024-04-16 | In mintplex-labs/anything-llm, an attacker can exploit improper input validation by sending a malformed JSON payload to the '/system/enable-multi-user' endpoin… |
CVE-2024-3028 | High | 7.2 | 2024-04-16 | mintplex-labs/anything-llm is vulnerable to improper input validation, allowing attackers to read and delete arbitrary files on the server. By manipulating the… |
CVE-2024-0549 | High | 8.1 | 2024-04-16 | mintplex-labs/anything-llm is vulnerable to a relative path traversal attack, allowing unauthorized attackers with a default role account to delete files and f… |
CVE-2024-0404 | Critical | 9.1 | 2024-04-16 | A mass assignment vulnerability exists in the `/api/invite/:code` endpoint of the mintplex-labs/anything-llm repository, allowing unauthorized creation of high… |
CVE-2024-3570 | Medium | 5.4 | 2024-04-10 | A stored Cross-Site Scripting (XSS) vulnerability exists in the chat functionality of the mintplex-labs/anything-llm repository, allowing attackers to execute… |
CVE-2024-3569 | High | 7.5 | 2024-04-10 | A Denial of Service (DoS) vulnerability exists in the mintplex-labs/anything-llm repository when the application is running in 'just me' mode with a password… |
CVE-2024-3283 | High | 7.2 | 2024-04-10 | A vulnerability in mintplex-labs/anything-llm allows users with manager roles to escalate their privileges to admin roles through a mass assignment issue. The… |
CVE-2024-3101 | High | 7.2 | 2024-04-10 | In mintplex-labs/anything-llm, an improper input validation vulnerability allows attackers to escalate privileges by deactivating 'Multi-User Mode'. By sending… |
CVE-2024-3025 | Critical | 9.9 | 2024-04-10 | mintplex-labs/anything-llm is vulnerable to path traversal attacks due to insufficient validation of user-supplied input in the logo filename functionality. At… |
CVE-2024-0765 | Medium | 6.5 | 2024-03-03 | As a default user on a multi-user instance of AnythingLLM, you could execute a call to the `/export-data` endpoint of the system and then unzip and read that e… |
CVE-2024-0795 | High | 7.2 | 2024-03-02 | If an attacked was given access to an instance with the admin or manager role there is no backend authentication that would prevent the attacked from creating… |
CVE-2024-0550 | Medium | 6.5 | 2024-02-28 | A user who is privileged already `manager` or `admin` can set their profile picture via the frontend API using a relative filepath to then user the PFP GET API… |
CVE-2024-0763 | High | 8.1 | 2024-02-27 | Any user can delete an arbitrary folder (recursively) on a remote server due to bad input sanitization leading to path traversal. The attacker would need acces… |
CVE-2024-0551 | High | 7.1 | 2024-02-27 | Enable exports of the database and associated exported information of the system via the default user role. The attacked would have to have been granted access… |
CVE-2024-0759 | High | 7.5 | 2024-02-27 | Should an instance of AnythingLLM be hosted on an internal network and the attacked be explicitly granted a permission level of manager or admin, they could li… |
CVE-2024-0798 | Medium | 6.5 | 2024-02-26 | A privilege escalation vulnerability exists in mintplex-labs/anything-llm, allowing users with 'default' role to delete documents uploaded by 'admin'. Despite… |
CVE-2024-0455 | High | 7.5 | 2024-02-26 | The inclusion of the web scraper for AnythingLLM means that any user with the proper authorization level (manager, admin, and when in single user) could put in… |
CVE-2024-0440 | Medium | 6.5 | 2024-02-26 | Attacker, with permission to submit a link or submits a link via POST to be collected that is using the file:// protocol can then introspect host files and ot… |
CVE-2024-0439 | High | 8.8 | 2024-02-26 | As a manager, you should not be able to modify a series of settings. In the UI this is indeed hidden as a convenience for the role since most managers would no… |
CVE-2024-0436 | Medium | 5.9 | 2024-02-26 | Theoretically, it would be possible for an attacker to brute-force the password for an instance in single-user password protection mode via a timing attack giv… |
CVE-2024-0435 | Medium | 5.4 | 2024-02-26 | User can send a chat that contains an XSS opportunity that will then run when the chat is sent and on subsequent page loads.
Given the minimum requirement for… |
CVE-2024-0879 | Medium | 6.5 | 2024-01-25 |
Authentication bypass in vector-admin allows a user to register to a vector-admin server while “domain restriction” is active, even when not owning an authori… |
CVE-2024-22422 | High | 7.5 | 2024-01-19 | AnythingLLM is an application that turns any document, resource, or piece of content into context that any LLM can use as references during chatting. In versio… |
CVE-2023-5833 | High | 8.8 | 2023-10-30 | Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0. |
CVE-2023-5832 | Critical | 9.1 | 2023-10-30 | Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0. |
CVE-2023-4899 | High | 8.8 | 2023-09-12 | SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. |
CVE-2023-4898 | High | 7.5 | 2023-09-12 | Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. |
CVE-2023-4897 | Critical | 9.8 | 2023-09-11 | Relative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. |