Mintplexlabs Anythingllm Desktop
2 CVEs affecting Mintplexlabs Anythingllm Desktop. Latest disclosed: 2025-03-20. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-8196 | Critical | 9.8 | 2025-03-20 | In mintplex-labs/anything-llm v1.5.11 desktop version for Windows, the application opens server port 3001 on 0.0.0.0 with no authentication by default. This vu… |
CVE-2024-3166 | Critical | 9.6 | 2024-06-06 | A Cross-Site Scripting (XSS) vulnerability exists in mintplex-labs/anything-llm, affecting both the desktop application version 1.2.0 and the latest version of… |