CVEs we hold for Mintplex-labs/anything-llm
Records whose assigning authority named Mintplex-labs/anything-llm as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-5627Path Traversal in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-8251Prisma Injection in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-8249Unauthenticated Denial of Service (DoS) in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-8248Path Traversal in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-8196Missing Authentication for Critical Function in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-7783Improper Storage of Sensitive Information in Bearer Token in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-7771Denial of Service in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-6842Exposure of Sensitive Information in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-5216Denial of Service in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-5213Exposure of Sensitive Information in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-5211Path Traversal to Arbitrary File Read/Delete/Overwrite, DoS Attack, and Admin Account Takeover in…mintplex-labs/anything-llm CVE-2024-5208Uncontrolled Resource Consumption in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-4287Improper Input Validation in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-4286Improper Neutralization of Special Elements in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-4284Denial of Service in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-4084SSRF vulnerability in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3570Stored XSS leading to Admin Account Takeover in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3569Denial of Service (DoS) Vulnerability in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3283Privilege Escalation via Mass Assignment in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3279Improper Access Control in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3166Cross-Site Scripting (XSS) Vulnerability in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3153Uncontrolled Resource Consumption in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3152Privilege Escalation and Local File Inclusion in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3150Privilege Escalation in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3149SSRF in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3110Stored XSS leading to admin account takeover in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3104Remote Code Execution in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3102JSON Injection in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3101Privilege Escalation via Improper Input Validation in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3033Improper Authorization in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3029Improper Input Validation in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3028Improper Input Validation in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-3025Path Traversal in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-2913Race Condition Vulnerability in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-13060Improper Authorization in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-13059Path Traversal in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-10513Path Traversal in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-10109Incorrect Authorization in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-0798Privilege Escalation in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-0795Create user API role not enforcedmintplex-labs/anything-llm CVE-2024-0765Default user role exporting save state of instancemintplex-labs/anything-llm CVE-2024-0763Improper validation of document removal parametermintplex-labs/anything-llm CVE-2024-0759Collection of internally resolving IPsmintplex-labs/anything-llm CVE-2024-0551Download and export of file via default user rolemintplex-labs/anything-llm CVE-2024-0550Privileged User using traversal to read system filesmintplex-labs/anything-llm CVE-2024-0549Relative Path Traversal in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2024-0455SSRF on AWS deployed instances of AnythingLLM via /metadatamintplex-labs/anything-llm CVE-2024-0440SSRF - file:// unsanitized access to underlying host filesmintplex-labs/anything-llm CVE-2024-0439User can manually send request at manager permission to modify system configurationsmintplex-labs/anything-llm CVE-2024-0436Prevent timing attack for single-user password checkmintplex-labs/anything-llm CVE-2024-0435User can submit message to self-XSSmintplex-labs/anything-llm CVE-2024-0404Mass Assignment Vulnerability in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2023-5833Improper Access Control in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2023-5832Improper Input Validation in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2023-4899SQL Injection in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2023-4898Authentication Bypass by Primary Weakness in mintplex-labs/anything-llmmintplex-labs/anything-llm CVE-2023-4897Relative Path Traversal in mintplex-labs/anything-llmmintplex-labs/anything-llm 57 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.