CyberSecBulletin

Mintplex-labs vulnerabilities

We track 42 vulnerabilities in Mintplex-labs products across 2 products. 42 are rated high or critical, and none are known to be exploited. The most recent was published on May 28, 2026.

42vulnerabilities
8critical
34high
0exploited
8.1average CVSS score

Latest Mintplex-labs vulnerabilities

  • 8.8 High severity

    mintplex-labs/anything-llm: Improper Privilege Management

    CVE-2024-0439Mintplex-labs

    As a manager, you should not be able to modify a series of settings. In the UI this is indeed hidden as a convenience for the role since most managers would not be savvy enough to modify these settings. They can use their token to still modify those settings t

  • 7.5 High severity

    anything-llm: Improper Check for Unusual or Exceptional Conditions

    CVE-2024-22422Mintplex-labsEPSS 1.04%

    AnythingLLM is an application that turns any document, resource, or piece of content into context that any LLM can use as references during chatting. In versions prior to commit `08d33cfd8` an unauthenticated API route (file export) can allow attacker to crash