Vulnerabilities

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within the `AgentFlows` component.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

An authentication bypass vulnerability exists in AnythingLLM v1.8.5 in via the /api/workspaces endpoint.

In mintplex-labs/anything-llm v1.5.11 desktop version for Windows, the application opens server port 3001 on 0.0.0.0 with no authentication by default.

A vulnerability in the normalizePath function in mintplex-labs/anything-llm version git 296f041 allows for path traversal, leading to arbitrary file read and write in the storage directory.

In version 1.5.5 of mintplex-labs/anything-llm, the `/setup-complete` API endpoint allows unauthorized users to access sensitive system settings.

A path traversal vulnerability exists in the 'document uploads manager' feature of mintplex-labs/anything-llm, affecting the latest version prior to 1.2.2.

mintplex-labs/anything-llm version git 6dc3642 contains an unauthenticated Denial of Service (DoS) vulnerability in the API for the embeddable chat functionality.