Login Request a demo
AN
Product
Anythingllm
by Mintplexlabs · last CVE May 28, 2026
68
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities68In the news0Timeline
Severity mix
Critical 8High 35Medium 22Low 3
Severity
All severities68Critical8High35Medium22Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Anythingllm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-32715
3.8
0%
Mar 13
AnythingLLM Manager Privilege Bypass Allows Access to Admin-Only System Preferences
Affected: through 1.11.1
CVE-2026-32717
2.7
0%
Mar 13
AnythingLLM access control bypass: suspended users can continue using Browser Extension API keys
Affected: through 1.11.1
CVE-2026-45403
2.5
0%
May 28
AnythingLLM: filesystem-copy-file follows nested symlinks and copies files from outside the allowed directory
Affected: before 1.13.0
Showing 3