CyberSecBulletin

Mintplexlabs vulnerabilities

We track 42 vulnerabilities in Mintplexlabs products across 4 products. 42 are rated high or critical, and none are known to be exploited. The most recent was published on May 28, 2026.

42vulnerabilities
8critical
34high
0exploited
8.1average CVSS score

Latest Mintplexlabs vulnerabilities

  • 8.8 High severity

    mintplex-labs/anything-llm: Improper Privilege Management

    CVE-2024-0439Mintplex-labs

    As a manager, you should not be able to modify a series of settings. In the UI this is indeed hidden as a convenience for the role since most managers would not be savvy enough to modify these settings. They can use their token to still modify those settings t

  • 7.5 High severity

    anything-llm: Improper Check for Unusual or Exceptional Conditions

    CVE-2024-22422Mintplex-labsEPSS 1.04%

    AnythingLLM is an application that turns any document, resource, or piece of content into context that any LLM can use as references during chatting. In versions prior to commit `08d33cfd8` an unauthenticated API route (file export) can allow attacker to crash