Read the docs
TI-2025-38111 Aliases CVE-2025-61679

Anyquery Unauthenticated Access Vulnerability Exposes Private Integration Data

Priority HIGH 67CWE-200Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure, Security bypass
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200 and CWE-287.

Summary

Anyquery is an SQL query engine built on top of SQLite. Versions 0.4.3 and below allow attackers who have already gained access to localhost, even with low privileges, to use the http server through the port unauthenticated, and access private integration data like emails, without any warning of a foreign login from the provider. This issue is fixed in version 0.4.4.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00153 4th percentileScored 2026-11-07
Fix Fixed anyquery (julien040): 0.4.4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
julien040anyquerybefore 0.4.40.4.4Patch availableCNA
  • anyquery Vendorjulien040 Affected before 0.4.4 Fixed in 0.4.4 Patch available CNA

Remediation

  • Fix · CNA anyquery (julien040) Fixed in 0.4.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-61679

References

Other 3

  • TI-2026-36832 Path traversal in julien040 anyquery CVSS 3.1CRITICAL 9.1
  • TI-2026-39459 Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode CVSS 3.1HIGH 8.6
  • TI-2026-34835 Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari) CVSS 3.1CRITICAL 9.0
  • TI-2026-34836 Anyquery: Path Traversal in `clear_plugin_cache` Allows Arbitrary Directory Deletion CVSS 3.1HIGH 7.3
  • TI-2026-39460 Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences