Mintplex-labs vulnerabilities
We track 42 vulnerabilities in Mintplex-labs products across 2 products. 42 are rated high or critical, and none are known to be exploited. The most recent was published on May 28, 2026.
42vulnerabilities
8critical
34high
0exploited
8.1average CVSS score
Latest Mintplex-labs vulnerabilities
- 8.8 High severity
mintplex-labs/anything-llm: Improper Privilege Management
As a manager, you should not be able to modify a series of settings. In the UI this is indeed hidden as a convenience for the role since most managers would not be savvy enough to modify these settings. They can use their token to still modify those settings t
- 7.5 High severity
anything-llm: Improper Check for Unusual or Exceptional Conditions
AnythingLLM is an application that turns any document, resource, or piece of content into context that any LLM can use as references during chatting. In versions prior to commit `08d33cfd8` an unauthenticated API route (file export) can allow attacker to crash