Anythingllm vulnerabilities
40 known vulnerabilities in Anythingllm from Mintplexlabs. 40 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
anything-llm: Improper Neutralization of Special Elements used in a Command
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, the filesystem-search-files agent skill passes its LLM-controlled pattern parameter to ripgrep as a positional argument
- 7.2 High severity
mintplex-labs/anything-llm: Path Traversal: '..filename'
A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within the `AgentFlows` component. The vulnerability arises from improper handling of user input in the `loadFlow` and `deleteFlow` methods in `server/utils
- 8.8 High severity
anything-llm: Improper Neutralization of Special Elements used in an SQL Command
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can invoke the agent to execut
- 9.6 Critical severity
anything-llm: Improper Neutralization of Input During Web Page Generation
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, AnythingLLM Desktop contains a Streaming Phase XSS vulnerability in the chat rendering pipeline that escalates to
- 7.5 High severity
anything-llm: Permissive Cross-domain Security Policy with Untrusted Domains
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, On default installations where no password or API key has been configured, all HTTP endpoints and the agent WebSo
- 7.2 High severity
anything-llm: Improper Limitation of a Pathname to a Restricted Directory
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.10.0, a critical Path Traversal vulnerability in the DrupalWiki integration allows a malicious admin (or an attacker
- 7.5 High severity
anything-llm: Insertion of Sensitive Information Into Sent Data
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. If AnythingLLM prior to version 1.10.0 is configured to use Qdrant as the vector database with an API key, this QdrantApiKey could be ex
- 7.5 High severity
mintplex-labs/anything-llm: Uncaught Exception
mintplex-labs/anything-llm version git 6dc3642 contains an unauthenticated Denial of Service (DoS) vulnerability in the API for the embeddable chat functionality. An attacker can exploit this vulnerability by sending a malformed JSON payload to the API endpoin
- 7.2 High severity
mintplex-labs/anything-llm: Path Traversal: '..filename'
A vulnerability in the normalizePath function in mintplex-labs/anything-llm version git 296f041 allows for path traversal, leading to arbitrary file read and write in the storage directory. This can result in privilege escalation from manager to admin. The iss
- 7.5 High severity
mintplex-labs/anything-llm: Missing Authentication for Critical Functionality
In version 1.5.5 of mintplex-labs/anything-llm, the `/setup-complete` API endpoint allows unauthorized users to access sensitive system settings. The data returned by the `currentSettings` function includes sensitive information such as API keys for search eng
- 7.2 High severity
mintplex-labs/anything-llm: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in the 'document uploads manager' feature of mintplex-labs/anything-llm, affecting the latest version prior to 1.2.2. This vulnerability allows users with the 'manager' role to access and manipulate the 'anythingllm.db' da
- 8.3 High severity
mintplex-labs/anything-llm: Incorrect Authorization
A vulnerability in the mintplex-labs/anything-llm repository, as of commit 5c40419, allows low privilege users to access the sensitive API endpoint "/api/system/custom-models". This access enables them to modify the model's API key and base path, leading to po
- 7.2 High severity
mintplex-labs/anything-llm: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in mintplex-labs/anything-llm prior to version 1.3.1 allows for path traversal due to improper handling of non-ASCII filenames in the multer library. This vulnerability can lead to arbitrary file write, which can subsequently result in remote c
- 7.5 High severity
mintplex-labs/anything-llm: Cleartext Storage of Sensitive Information
mintplex-labs/anything-llm version latest contains a vulnerability where sensitive information, specifically a password, is improperly stored within a JWT (JSON Web Token) used as a bearer token in single user mode. When decoded, the JWT reveals the password i
- 9.1 Critical severity
mintplex-labs/anything-llm: Missing Authentication for Critical Functionality
An improper access control vulnerability exists in the mintplex-labs/anything-llm application, specifically within the import endpoint. This vulnerability allows an anonymous attacker, without an account in the application, to import their own database file, l
- 7.5 High severity
mintplex-labs/anything-llm: Uncontrolled Resource Consumption
A vulnerability in mintplex-labs/anything-llm allows for a Denial of Service (DoS) condition due to uncontrolled resource consumption. Specifically, the issue arises from the application's failure to limit the size of usernames, enabling attackers to create us
- 7.2 High severity
mintplex-labs/anything-llm: Path Traversal: '..filename'
A path traversal vulnerability in mintplex-labs/anything-llm allowed a manager to bypass the `normalizePath()` function, intended to defend against path traversal attacks. This vulnerability enables the manager to read, delete, or overwrite the 'anythingllm.db
- 8.8 High severity
mintplex-labs/anything-llm: Improper Handling of Exceptional Conditions
In mintplex-labs/anything-llm, a vulnerability exists in the thread update process that allows users with Default or Manager roles to escalate their privileges to Administrator. The issue arises from improper input validation when handling HTTP POST requests t
- 8.8 High severity
mintplex-labs/anything-llm: Server-Side Request Forgery
A Server-Side Request Forgery (SSRF) vulnerability exists in the upload link feature of mintplex-labs/anything-llm. This feature, intended for users with manager or admin roles, processes uploaded links through an internal Collector API using a headless browse
- 8.7 High severity
mintplex-labs/anything-llm: Improper Neutralization of Input During Web Page Generation
A stored Cross-Site Scripting (XSS) vulnerability exists in the mintplex-labs/anything-llm application, affecting versions up to and including the latest before 1.0.0. The vulnerability arises from the application's failure to properly sanitize and validate us
- 8.8 High severity
mintplex-labs/anything-llm: Improper Handling of Exceptional Conditions
mintplex-labs/anything-llm is vulnerable to multiple security issues due to improper input validation in several endpoints. An attacker can exploit these vulnerabilities to escalate privileges from a default user role to an admin role, read and delete arbitrar
- 9.8 Critical severity
mintplex-labs/anything-llm: Improper Neutralization of Special Elements used in an OS Command
A remote code execution vulnerability exists in mintplex-labs/anything-llm due to improper handling of environment variables. Attackers can exploit this vulnerability by injecting arbitrary environment variables via the `POST /api/system/update-env` endpoint,
- 9.4 Critical severity
mintplex-labs/anything-llm: Incorrect Authorization
An improper authorization vulnerability exists in the mintplex-labs/anything-llm application, specifically within the '/api/v/' endpoint and its sub-routes. This flaw allows unauthenticated users to perform destructive actions on the VectorDB, including resett
- 7.5 High severity
mintplex-labs/anything-llm: Server-Side Request Forgery
A Server-Side Request Forgery (SSRF) vulnerability exists in the latest version of mintplex-labs/anything-llm, allowing attackers to bypass the official fix intended to restrict access to intranet IP addresses and protocols. Despite efforts to filter out intra
- 7.2 High severity
In mintplex-labs/anything-llm, a vulnerability exists due to improper input validation in the…
In mintplex-labs/anything-llm, a vulnerability exists due to improper input validation in the workspace update process. Specifically, the application fails to validate or format JSON data sent in an HTTP POST request to `/api/workspace/:workspace-slug/update`,
- 8.0 High severity
In mintplex-labs/anything-llm, an attacker can exploit improper input validation by sending a…
In mintplex-labs/anything-llm, an attacker can exploit improper input validation by sending a malformed JSON payload to the '/system/enable-multi-user' endpoint. This triggers an error that is caught by a catch block, which in turn deletes all users and disabl
- 7.2 High severity
mintplex-labs/anything-llm is vulnerable to improper input validation, allowing attackers to…
mintplex-labs/anything-llm is vulnerable to improper input validation, allowing attackers to read and delete arbitrary files on the server. By manipulating the 'logo_filename' parameter in the 'system-preferences' API endpoint, an attacker can construct reques
- 8.1 High severity
mintplex-labs/anything-llm: Relative Path Traversal
mintplex-labs/anything-llm is vulnerable to a relative path traversal attack, allowing unauthorized attackers with a default role account to delete files and folders within the filesystem, including critical database files such as 'anythingllm.db'. The vulnera
- 9.1 Critical severity
mintplex-labs/anything-llm: Improperly Controlled Modification of Dynamically-Determined Object Attributes
A mass assignment vulnerability exists in the `/api/invite/:code` endpoint of the mintplex-labs/anything-llm repository, allowing unauthorized creation of high-privileged accounts. By intercepting and modifying the HTTP request during the account creation proc
- 7.5 High severity
mintplex-labs/anything-llm: Uncontrolled Resource Consumption
A Denial of Service (DoS) vulnerability exists in the mintplex-labs/anything-llm repository when the application is running in 'just me' mode with a password. An attacker can exploit this vulnerability by making a request to the endpoint using the [validatedRe
- 7.2 High severity
mintplex-labs/anything-llm: Improperly Controlled Modification of Dynamically-Determined Object Attributes
A vulnerability in mintplex-labs/anything-llm allows users with manager roles to escalate their privileges to admin roles through a mass assignment issue. The '/admin/system-preferences' API endpoint improperly authorizes manager-level users to modify the 'mul
- 7.2 High severity
In mintplex-labs/anything-llm, an improper input validation vulnerability allows attackers to…
In mintplex-labs/anything-llm, an improper input validation vulnerability allows attackers to escalate privileges by deactivating 'Multi-User Mode'. By sending a specially crafted curl request with the 'multi_user_mode' parameter set to false, an attacker can
- 9.9 Critical severity
mintplex-labs/anything-llm: Relative Path Traversal
mintplex-labs/anything-llm is vulnerable to path traversal attacks due to insufficient validation of user-supplied input in the logo filename functionality. Attackers can exploit this vulnerability by manipulating the logo filename to reference files outside o
- 7.2 High severity
mintplex-labs/anything-llm: Improper Access Control
If an attacked was given access to an instance with the admin or manager role there is no backend authentication that would prevent the attacked from creating a new user with an `admin` role and then be able to use this new account to have elevated privileges
- 8.1 High severity
mintplex-labs/anything-llm: Improper Limitation of a Pathname to a Restricted Directory
Any user can delete an arbitrary folder (recursively) on a remote server due to bad input sanitization leading to path traversal. The attacker would need access to the server at some privilege level since this endpoint is protected and requires authorization.
- 7.1 High severity
mintplex-labs/anything-llm: Improper Access Control
Enable exports of the database and associated exported information of the system via the default user role. The attacked would have to have been granted access to the system prior to the attack. It is worth noting that the deterministic nature of the export na
- 7.5 High severity
mintplex-labs/anything-llm: Server-Side Request Forgery
Should an instance of AnythingLLM be hosted on an internal network and the attacked be explicitly granted a permission level of manager or admin, they could link-scrape internally resolving IPs of other services that are on the same network as AnythingLLM. Thi
- 7.5 High severity
mintplex-labs/anything-llm: Server-Side Request Forgery
The inclusion of the web scraper for AnythingLLM means that any user with the proper authorization level (manager, admin, and when in single user) could put in the URL ``` http://169.254.169.254/latest/meta-data/identity-credentials/ec2/security-credentials/ec
- 8.8 High severity
mintplex-labs/anything-llm: Improper Privilege Management
As a manager, you should not be able to modify a series of settings. In the UI this is indeed hidden as a convenience for the role since most managers would not be savvy enough to modify these settings. They can use their token to still modify those settings t
- 7.5 High severity
anything-llm: Improper Check for Unusual or Exceptional Conditions
AnythingLLM is an application that turns any document, resource, or piece of content into context that any LLM can use as references during chatting. In versions prior to commit `08d33cfd8` an unauthenticated API route (file export) can allow attacker to crash