SSRF - file:// unsanitized access to underlying host files

Privilege Escalation in mintplex-labs/anything-llm

AnythingLLM has a Zip Slip Path Traversal and Code Execution via Community Hub Plugin Import

Prevent timing attack for single-user password check

AnythingLLM vulnerable to stored DOM XSS in chart caption renderer - LLM-driven prompt injection produces executable HTML via unsanitized renderMarkdown(content.caption) in Chartable component

Stored XSS leading to Admin Account Takeover in mintplex-labs/anything-llm

User can submit message to self-XSS

AnythingLLM Vulnerable to Username Enumeration w/ Password Recovery

An authentication bypass vulnerability exists in AnythingLLM v1.8.5 in via the /api/workspaces endpoint

Prisma Injection in mintplex-labs/anything-llm

JSON Injection in mintplex-labs/anything-llm

Improper Neutralization of Special Elements in mintplex-labs/anything-llm

Denial of Service in mintplex-labs/anything-llm

AnythingLLM: Legacy mobile device tokens bypass multi-user workspace scoping after mode migration

AnythingLLM: Cross-User TTS Audio Disclosure via Chat ID (IDOR)

AnythingLLM Manager Privilege Bypass Allows Access to Admin-Only System Preferences

AnythingLLM access control bypass: suspended users can continue using Browser Extension API keys

AnythingLLM: filesystem-copy-file follows nested symlinks and copies files from outside the allowed directory