mintplex-labs

Records78All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high37CVSS 7.0–8.9

Exploited now

mintplex-labs records in CISA KEV

No mintplex-labs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Anythingllm 67 records HIGH Anything-llm 2 records HIGH Anythingllm Desktop 2 records HIGH Anythingllm Docker 2 records HIGH Vector Admin 1 record LOW

Records

2 records in Anythingllm Desktop · all components

TI-2024-07601 CVE-2024-8196 · GHSA-2mv8-c3hx-xq6v

Missing Authentication for Critical Function in mintplex-labs/anything-llm

HIGH 82

In mintplex-labs/anything-llm v1.5.11 desktop version for Windows, the application opens server port 3001 on 0.0.0.0 with no authentication by default.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00844 Published 2025-03-20 Fixed in 1.6.5 CWE-306

TI-2024-02966 CVE-2024-3166 · GHSA-g2q4-9pcj-78cw

Cross-Site Scripting (XSS) Vulnerability in mintplex-labs/anything-llm

HIGH 74

A Cross-Site Scripting (XSS) vulnerability exists in mintplex-labs/anything-llm, affecting both the desktop application version 1.2.0 and the latest version of the web application.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0097 Published 2024-06-06 Fixed in 1.4.2 CWE-79

Open these records in search →

Critical	10
High	37
Medium	27
Low	3
No CVSS	1