agentprime: mintplex-labs-anything-llm

agentprime: mintplex-labs-anything-llmEvery new CVE for mintplex-labs-anything-llm.https://agentprime.io/CVE-2026-88055: AnythingLLM: Stored XSS Due to Unescaped Server-Side HTML Concatenation in MetaGeneratorhttps://agentprime.io/advisories/CVE-2026-88055/https://agentprime.io/advisories/CVE-2026-88055/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 17:53:16 GMTCVECVE-2026-72917: AnythingLLM: Password recovery accepts one recovery code twice after whitespace normalizationhttps://agentprime.io/advisories/CVE-2026-72917/https://agentprime.io/advisories/CVE-2026-72917/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 21:35:33 GMTCVECVE-2026-55611: AnythingLLM: embed-parsed-file cleanup deletes any parsed file by ID without ownership scoping (cross-tenant IDOR deletion)https://agentprime.io/advisories/CVE-2026-55611/https://agentprime.io/advisories/CVE-2026-55611/CVSS 0.0 (None). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 17:17:03 GMTCVECVE-2026-48789: AnythingLLM: Windows path containment bypass in document folder routehttps://agentprime.io/advisories/CVE-2026-48789/https://agentprime.io/advisories/CVE-2026-48789/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jun 2026 17:13:20 GMTCVECVE-2026-47713: AnythingLLM: Legacy mobile device tokens bypass multi-user workspace scoping after mode migrationhttps://agentprime.io/advisories/CVE-2026-47713/https://agentprime.io/advisories/CVE-2026-47713/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 21:20:56 GMTCVECVE-2026-48116: AnythingLLM: RCE via ripgrep --pre argument injection in filesystem-search-files agent skillhttps://agentprime.io/advisories/CVE-2026-48116/https://agentprime.io/advisories/CVE-2026-48116/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 21:19:51 GMTCVECVE-2026-45403: AnythingLLM: filesystem-copy-file follows nested symlinks and copies files from outside the allowed directoryhttps://agentprime.io/advisories/CVE-2026-45403/https://agentprime.io/advisories/CVE-2026-45403/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 21:18:08 GMTCVECVE-2026-42456: AnythingLLM: Cross-User TTS Audio Disclosure via Chat ID (IDOR)https://agentprime.io/advisories/CVE-2026-42456/https://agentprime.io/advisories/CVE-2026-42456/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 23:01:30 GMTCVECVE-2026-41318: AnythingLLM vulnerable to stored DOM XSS in chart caption renderer - LLM-driven prompt injection produces executable HTML via unsanitized renderMarkdown(content.caption) in Chartable componenthttps://agentprime.io/advisories/CVE-2026-41318/https://agentprime.io/advisories/CVE-2026-41318/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Apr 2026 02:57:16 GMTCVECVE-2026-5627: Path Traversal in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2026-5627/https://agentprime.io/advisories/CVE-2026-5627/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 13:06:38 GMTCVEcriticalCVE-2026-32719: AnythingLLM has a Zip Slip Path Traversal and Code Execution via Community Hub Plugin Importhttps://agentprime.io/advisories/CVE-2026-32719/https://agentprime.io/advisories/CVE-2026-32719/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 21:25:31 GMTCVECVE-2026-32717: AnythingLLM access control bypass: suspended users can continue using Browser Extension API keyshttps://agentprime.io/advisories/CVE-2026-32717/https://agentprime.io/advisories/CVE-2026-32717/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 21:23:48 GMTCVECVE-2026-32715: AnythingLLM Manager Privilege Bypass Allows Access to Admin-Only System Preferenceshttps://agentprime.io/advisories/CVE-2026-32715/https://agentprime.io/advisories/CVE-2026-32715/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 21:22:00 GMTCVECVE-2026-32628: AnythingLLM has SQL Injection in Built-in SQL Agent Plugin via Unsanitized table_name Parameterhttps://agentprime.io/advisories/CVE-2026-32628/https://agentprime.io/advisories/CVE-2026-32628/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 20:50:15 GMTCVECVE-2026-32626: AnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injectionhttps://agentprime.io/advisories/CVE-2026-32626/https://agentprime.io/advisories/CVE-2026-32626/CVSS 9.7 (Critical). Critical: CVSS score 9.7: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 20:14:30 GMTCVEcriticalCVE-2026-32617: AnythingLLM Permissable CORS policyhttps://agentprime.io/advisories/CVE-2026-32617/https://agentprime.io/advisories/CVE-2026-32617/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 20:07:57 GMTCVECVE-2026-24478: AnythingLLM vulnerable to Path Traversalhttps://agentprime.io/advisories/CVE-2026-24478/https://agentprime.io/advisories/CVE-2026-24478/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Jan 2026 23:23:54 GMTCVECVE-2026-24477: AnythingLLM has key leak in `systemSettings.js`https://agentprime.io/advisories/CVE-2026-24477/https://agentprime.io/advisories/CVE-2026-24477/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Jan 2026 23:22:27 GMTCVECVE-2026-21484: AnythingLLM Vulnerable to Username Enumeration w/ Password Recoveryhttps://agentprime.io/advisories/CVE-2026-21484/https://agentprime.io/advisories/CVE-2026-21484/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Jan 2026 01:21:39 GMTCVECVE-2024-8196: Missing Authentication for Critical Function in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-8196/https://agentprime.io/advisories/CVE-2024-8196/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:11:34 GMTCVEcriticalCVE-2024-8248: Path Traversal in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-8248/https://agentprime.io/advisories/CVE-2024-8248/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:11:32 GMTCVECVE-2024-6842: Exposure of Sensitive Information in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-6842/https://agentprime.io/advisories/CVE-2024-6842/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.36 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:10:27 GMTCVEcriticalCVE-2024-10513: Path Traversal in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-10513/https://agentprime.io/advisories/CVE-2024-10513/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:09:51 GMTCVECVE-2024-8249: Unauthenticated Denial of Service (DoS) in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-8249/https://agentprime.io/advisories/CVE-2024-8249/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:09:41 GMTCVECVE-2024-10109: Incorrect Authorization in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-10109/https://agentprime.io/advisories/CVE-2024-10109/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:09:27 GMTCVECVE-2024-7771: Denial of Service in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-7771/https://agentprime.io/advisories/CVE-2024-7771/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:08:49 GMTCVECVE-2024-8251: Prisma Injection in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-8251/https://agentprime.io/advisories/CVE-2024-8251/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:08:48 GMTCVECVE-2024-13060: Improper Authorization in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-13060/https://agentprime.io/advisories/CVE-2024-13060/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:08:46 GMTCVECVE-2024-13059: Path Traversal in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-13059/https://agentprime.io/advisories/CVE-2024-13059/CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.24 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Feb 2025 18:53:04 GMTCVEcriticalCVE-2024-7783: Improper Storage of Sensitive Information in Bearer Token in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-7783/https://agentprime.io/advisories/CVE-2024-7783/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Oct 2024 12:49:34 GMTCVECVE-2024-3279: Improper Access Control in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-3279/https://agentprime.io/advisories/CVE-2024-3279/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Aug 2024 00:00:14 GMTCVEcriticalCVE-2024-5216: Denial of Service in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-5216/https://agentprime.io/advisories/CVE-2024-5216/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 10:29:55 GMTCVECVE-2024-5213: Exposure of Sensitive Information in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-5213/https://agentprime.io/advisories/CVE-2024-5213/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Jun 2024 02:15:33 GMTCVECVE-2024-5208: Uncontrolled Resource Consumption in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-5208/https://agentprime.io/advisories/CVE-2024-5208/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Jun 2024 06:13:21 GMTCVECVE-2024-5211: Path Traversal to Arbitrary File Read/Delete/Overwrite, DoS Attack, and Admin Account Takeover in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-5211/https://agentprime.io/advisories/CVE-2024-5211/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Jun 2024 11:33:42 GMTCVEcriticalCVE-2024-3150: Privilege Escalation in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-3150/https://agentprime.io/advisories/CVE-2024-3150/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:53:43 GMTCVECVE-2024-3149: SSRF in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-3149/https://agentprime.io/advisories/CVE-2024-3149/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:43:50 GMTCVEcriticalCVE-2024-3153: Uncontrolled Resource Consumption in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-3153/https://agentprime.io/advisories/CVE-2024-3153/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:40:53 GMTCVECVE-2024-3166: Cross-Site Scripting (XSS) Vulnerability in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-3166/https://agentprime.io/advisories/CVE-2024-3166/CVSS 3.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:23:36 GMTCVECVE-2024-3102: JSON Injection in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-3102/https://agentprime.io/advisories/CVE-2024-3102/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:19:23 GMTCVECVE-2024-3110: Stored XSS leading to admin account takeover in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-3110/https://agentprime.io/advisories/CVE-2024-3110/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:11:33 GMTCVECVE-2024-3104: Remote Code Execution in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-3104/https://agentprime.io/advisories/CVE-2024-3104/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 17:50:18 GMTCVEcriticalCVE-2024-3033: Improper Authorization in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-3033/https://agentprime.io/advisories/CVE-2024-3033/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 17:32:35 GMTCVEcriticalCVE-2024-3152: Privilege Escalation and Local File Inclusion in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-3152/https://agentprime.io/advisories/CVE-2024-3152/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 17:19:15 GMTCVECVE-2024-4084: SSRF vulnerability in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-4084/https://agentprime.io/advisories/CVE-2024-4084/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Jun 2024 00:00:14 GMTCVECVE-2024-4286: Improper Neutralization of Special Elements in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-4286/https://agentprime.io/advisories/CVE-2024-4286/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 26 May 2024 22:25:12 GMTCVECVE-2024-4287: Improper Input Validation in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-4287/https://agentprime.io/advisories/CVE-2024-4287/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 May 2024 12:24:51 GMTCVECVE-2024-4284: Denial of Service in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-4284/https://agentprime.io/advisories/CVE-2024-4284/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 19 May 2024 22:23:48 GMTCVECVE-2024-2913: Race Condition Vulnerability in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-2913/https://agentprime.io/advisories/CVE-2024-2913/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 May 2024 23:42:10 GMTCVECVE-2024-3029: Improper Input Validation in mintplex-labs/anything-llmhttps://agentprime.io/advisories/CVE-2024-3029/https://agentprime.io/advisories/CVE-2024-3029/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Apr 2024 00:00:14 GMTCVEcritical