Medium severity · published Mar 13, 2026
CVE-2026-32719
AnythingLLM has a Zip Slip Path Traversal and Code Execution via Community Hub Plugin Import
6.4
CVSS
0.4%
EPSS
No
On KEV
Description
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, The ImportedPlugin.importCommunityItemFromUrl() function in server/utils/agents/imported.js downloads a ZIP file from a community hub URL and extracts it using AdmZip.extractAllTo() without validating file paths within the archive. This enables a Zip Slip path traversal attack that can lead to arbitrary code execution.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
High
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
anything-llm · Mintplex-Labs
<= 1.11.1 · source: vendor
AN
Anythingllm · Mintplexlabs
through 1.11.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-32719
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-32719
Patch
https://github.com/Mintplex-Labs/anything-llm/commit/6a492f038da195a5c9a239d5ca2e9f2151c25f8c
Exploit
https://github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-rh66-4w74-cf4m
More from anything-llm
9.6
CVE-2026-32626
AnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injection
8.8
CVE-2026-48116
AnythingLLM: RCE via ripgrep --pre argument injection in filesystem-search-files agent skill
8.8
CVE-2026-32628
AnythingLLM has SQL Injection in Built-in SQL Agent Plugin via Unsanitized table_name Parameter
7.5
CVE-2026-32617
AnythingLLM Permissable CORS policy
7.5
CVE-2026-24477
AnythingLLM has key leak in `systemSettings.js`