AN
Product
anything-llm
19
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 8Low 3
Watch
Add anything-llm to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-32715 | 3.8 | Mar 13 | AnythingLLM Manager Privilege Bypass Allows Access to Admin-Only System Preferences Affected: <= 1.11.1 |
| CVE-2026-32717 | 2.7 | Mar 13 | AnythingLLM access control bypass: suspended users can continue using Browser Extension API keys Affected: <= 1.11.1 |
| CVE-2026-45403 | 2.5 | May 28 | AnythingLLM: filesystem-copy-file follows nested symlinks and copies files from outside the allowed directory Affected: < 1.13.0 |
Showing 3