repository icon
mintplex-labs / anything-llm Project repository

The all-in-one Desktop & Docker AI application with built-in RAG, AI agents, and more.

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN23 DAYS

FIX

WITHIN615 DAYS

SSRF via upload-link Endpoint with Incomplete IP Blocklist
ripp3rdoc
self closed
Test repo check - anything-llm
ripp3rdoc
self closed
Stored XSS via SVG File Upload to Workspace Profile Picture Endpoint
jd-admrl-ai
self closed
Embed Domain Allowlist Bypass via Spoofed Origin Header in canRespond Middleware
jd-admrl-ai
self closed
Cross-Workspace Thread IDOR via Missing workspace_id Check in validWorkspaceAndT...
jd-admrl-ai
self closed
Missing Authorization on POST /api/onboarding Allows Any Authenticated User to C...
vuvannam-sec
self closed
Arbitrary File Read via Symlink Following in Collector processSingleFile Pipelin...
vuvannam-sec
self closed
RCE via NODE_OPTIONS / LD_PRELOAD injection through unsanitized MCP server envir...
vuvannam-sec
self closed
API Keys Lack Scope/Permission Enforcement — Any Valid API Key Grants Full Admin...
vuvannam-sec
self closed
Unauthenticated WebSocket Hijacking of Agent Sessions via /api/agent-invocation/...
vuvannam-sec
self closed
Stored XSS in Chart Caption Rendering
researchandevv
duplicate
High
Critical Remote Code Execution (RCE) via Puppeteer browserLaunchArgs Command Inj...
mr-jeneral
pending
Broken Access Control: Unauthenticated WebSocket Agent Execution via /agent-invo...
microwaveovens-yay
pending
Broken Access Control: Unauthenticated env dump writes 70+ secrets in production
microwaveovens-yay
duplicate
Critical
Arbitrary Code Execution via Stored hubId Poisoning in ImportedPlugin
kimkou2024
pending
Arbitrary File Read via absolutePath Parameter Bypass of isWithin Path Traversal...
lihfdgjr
pending
Suspended admin retains full admin API access via pre-issued generic API key
siddforeal
pending
TTS Endpoint Missing Ownership Check Allows Cross-User Private Chat Exfiltration...
9to5ai
pending
API Thread Chat Endpoints Allow Arbitrary User Impersonation via Unvalidated use...
9to5ai
pending
SQL Agent Executes Arbitrary Unsanitized Queries on Connected Databases
javitoia
self closed
Unauthenticated GET /v1/system/env-dump Writes All Secrets to Disk
javitoia
duplicate
High
Remote Code Execution via Unsandboxed require() in Community Hub Plugin System
javitoia
self closed
Unauthenticated Disclosure of SQL Database Credentials via /api/setup-complete
runtimexterror
pending
Incomplete XSS Fix — Chartable Component Renders AI-Generated Caption Without DO...
lemonkiil
pending
SSRF via Agent Flow API Call block allows access to internal services
narrator3333-hash
pending
SQL Injection in SQL Agent plugin — template literal interpolation in MySQL/Post...
odysseypro25-project
pending
SSRF via unvalidated basePath parameter in Docker Model Runner download endpoint
sridhars-hac
pending
SQL Injection in Built-in SQL Agent Plugin (getTableSchemaSql)
aviral2642
pending
CORS Origin Reflection + Missing Authentication Enables Full Configuration Takeo...
apeiria-zero
pending
SSRF via Link Document Source Allowing Access to Cloud Metadata (169.254.169.254...
espanda666
pending
Server-Side Request Forgery via basePath parameter in /system/custom-models end...
yashvardhantrip
pending
Privilege Escalation via Missing Role-Based Access Control (RBAC) on API Admin E...
ethan-yang-opcia
pending
Stored XSS via Unrestricted SVG File Upload in Logo Endpoint
ethan-yang-opcia
duplicate
Medium
Unauthenticated Configuration Disclosure via /setup-complete Endpoint
galanzi2580-wq
pending
Unauthenticated Environment Dump Trigger Overwrites .env File in Production
galanzi2580-wq
pending
Developer API Authorization Bypass Allows Cross-Workspace Data Access in Multi-U...
galanzi2580-wq
pending
Unauthenticated Access to System Logs and Configuration via API Endpoint
sebas5207418
pending
Unauthenticated SSRF via IPv6 Loopback Bypass in Link Collector
orel-asper
pending
DOM XSS via unsafe Markdown rendering in chat interface
eliyastein
informative
Medium
Path Traversal in Agent Flows via `uuid` (Arbitrary .json File Read/Delete)
chenhouser2025
Critical
•CVE-2026-5627
Arbitrary Environment Manipulation via /system/update-env leads to Global Path T...
chmgx81
pending
Cross-Workspace IDOR allows arbitrary file deletion
rootkid19
duplicate
High
Denial of Service via Null Byte Injection in File Upload
luvx113274
pending
Stored_XSS in Site Title modifiable by Manager Role
luvx113274
pending
delete-parsed-files lacks permission checks, allowing arbitrary user files to be...
xlabaiteam
pending
Path Traversal Vulnerability in anything-llm
bekmanstas
pending
Changing the "ID" parameter in the user cookie allows loading the profile pictur...
cyber-wo0dy
Medium
•CVE-2024-13060
Path traversal, lead to arbitrary file write, lead to remote code execution
oicu0619
High
•$450•CVE-2024-13059
Redos (Regular Expression Denial of Service)
oicu0619
informative
Medium
Sensitive Data Exposure via API
1d8
informative
High
Stored Cross-Site Scripting (XSS) Within Profile Images
1d8
duplicate
High
Server-Side Request Forgery (SSRF) Via Workspace Document Upload
1d8
duplicate
Medium
Low privilege user can modify model settings, leading to LLM API key leakage, an...
oicu0619
High
•$450•CVE-2024-10109
DoS attack in Upload document
vishnuraj-r
informative
Medium
Data leak through CORS misconfiguration
h2oa
not applicable
CSRF lead to take over admin account
h2oa
not applicable
Directly take user json to prisma library where clause, aka prisma injection
oicu0619
Medium
•$120•CVE-2024-8251
unauth DOS on embed chat
oicu0619
High
•$450•CVE-2024-8249
Path traversal lead to arbitrary file write/read in storage dir, further lead to...
oicu0619
duplicate
High
•CVE-2024-8248
Origin mirroring on API-endpoints allow CSRF
patrik-ha
informative
High
Collector endpoint for parsing Office files vulnerable to ZIP-bomb
patrik-ha
informative
Medium
anything LLM desktop version on windows open server port with no authentication...
oicu0619
Critical
•$900•CVE-2024-8196
SSRF in Document upload allows Access to Cloud Instance Metadata
karthik983
duplicate
Medium
Improper Session Management: JWT Token Not Invalidated After Logout
karthik983
informative
High
Access to internal network assets via SSRF through DNS resolving
winters0x64
duplicate
High
SSRF in /upload-link endpoint allows reading of Internal network assets
winters0x64
informative
Medium
Improper Storage of Sensitive information in Bearer Token
karthik983
Medium
•$75•CVE-2024-7783
Cross-Site Scripting Via Workspace Image Upload
1d8
duplicate
High
Reflected XSS Vulnerability via SVG File Upload in AnythingLLM
devsecops-47
duplicate
Medium
Denial of service by uploading audio file with low sample rate
patrik-ha
Medium
•$75•CVE-2024-7771
User with manager role can delete other users profile pictures
r3zk1
informative
Medium
Unauthorized user can get full access to "anythingllm.db" system database, read...
r3zk1
High
•$630•CVE-2024-10513
SSRF bypass using redirect
lager1
informative
High
Exposure sensitive info via specific API
rpie9
High
•$450•CVE-2024-6842
Pixel Flood Attack Vulnerability in Image Upload Feature
saimanikanta1992
informative
Medium
Site wide path traversal bypass for the normalizePath() on windows installations
saymenn
informative
High
SSRF protection bypass
saymenn
self closed
Denial of Service in users Home Page including admin's, and in Workspaces settin...
mnqazi
informative
Medium
Open Redirect
aaron911
informative
High
Denial of Service in User Management Prevents Admin from Editing, Suspending, or...
mnqazi
High
•$450•CVE-2024-5216
Hardcoded Plaintext Passwords in JWT Tokens in Single user mode
mnqazi
informative
High
Wrong Icon causes UI rendering failure
aaron911
informative
Medium
•CVE-2024-5214
Multiple Stored XSS via Picture Upload's leading to Account takeover in mintplex...
alfinj0se
duplicate
High
Security Headers in Express.js Application
1bdool492
informative
Medium
Password hash of user returned in responses
acciobugs
Medium
•$75•CVE-2024-5213
ssrf bug to access internal network
d47secc
informative
High
Path traversal to Arbitrary file Read/Delete/Overwrite, DoS attack and admin acc...
r3zk1
Critical
•$1260•CVE-2024-5211
Response tampering lead to delele/update thread of another user
d47secc
not applicable
(Still exploitable) Shutting down the server by sending invalid upload request
sev-hack
Medium
•$75•CVE-2024-5208
Potential clickjacking through iframes
patrik-ha
informative
Medium
Frameable response (potential Clickjacking)
mnqazi
informative
Medium
•CVE-2024-4206
ssrf bug to scan internet network
happypwn1337
duplicate
Critical
Upload HTML file lead to Stored XSS
h2oa
duplicate
High
ssrf bug to access internal network
t1m0n0
informative
Critical
SSRF leads to cloud data leakage in azure
c0ldb00t3r
informative
High
Admin account takeover
r3zk1
informative
High
User with manager role is able to create new Administrator accounts
r3zk1
High
•$450•CVE-2024-4287
User modification allows for data modification
lager1
Medium
•$90•CVE-2024-4286
Denial of service by assigning specific user id
lager1
Medium
•$90•CVE-2024-4284
HTML injection in chat enables users to unknowingly upload files to the attacker...
mnqazi
informative
Medium
Unrestricted Profile Picture Upload leads to stored XSS by uploading malicious S...
mnqazi
informative
Critical
Stored XSS in Account avatar upload
nduy2110
duplicate
Critical
Default / manager user can escalate their privileges to Administrator
r3zk1
High
•$450•CVE-2024-3150
Prisma Filter Injection allow user enumeration
nduy2110
informative
High
SSRF bug to access internal network
nduy2110
duplicate
High
SSRF in the upload link feature leads to accessing internal Collector API and es...
r3zk1
Critical
•$900•CVE-2024-3149
Observable Timing Discrepancy
dievus
informative
Medium
Server-Side Request Forgery
dievus
duplicate
High
Denial of service using the `/api/migrate` endpoint
lager1
informative
Medium
JSON Web Token Tampering Denial of Service
dievus
duplicate
High
Improper input validation in Collector API leads to unauthenticated arbitary fil...
r3zk1
informative
Critical
Stored XSS to admin account takeover
r3zk1
High
•$450•CVE-2024-3110
Improper authorization check leads to deleting and erasing all data in VectorDB
r3zk1
Critical
•$900•CVE-2024-3033
Logo upload function allows uploading arbitrary files
kr3ww
informative
High
username enumeration vulnerability
james-niki
informative
Medium
A user can crash the entire app causing a DoS by only sending a message in chat...
r3zk1
self closed
'collector/utils/url/index.js' sanitization on IP in 'isInvalidIp' can by bypass...
retr0reg
informative
Medium
Privilege escalation from default to role to admin and then LFI and more
ozelis
High
•$450•CVE-2024-3152
Full read SSRF via within docker port scan using URL redirection.
ph4nt0m-py
duplicate
Critical
Cross site scripting using the fetch website feature
lager1
Low
•$15•CVE-2024-3166
Blind XSS bug in Chat
dvtuna
informative
Medium
Race Condition in /api/workspace/:slug/stream-chat
ch1nhpd
informative
Medium
Insufficient session expiration
h2oa
duplicate
Medium
Default role users can view the settings interface of admin/manager role users
h2oa
duplicate
Medium
SSRF bypass using redirect
lager1
duplicate
Medium
SSRF access to internal network assets
bl0ckbeard
duplicate
High
DOS attack in Just me mode
chanzep
High
•$450•CVE-2024-3569
No rate limit at login form
h2oa
duplicate
High
No rate limit on login form
kirtiso
informative
Medium
Prompt Injection Leads to Information Disclosure in Anything LLM Prompt
lohigowdain
not applicable
SSRF bypass on `POST /api/workspace/:slug/upload-link`
lager1
duplicate
High
Injection to query engine using username
lager1
informative
High
The manager role can update the value of an arbitrary label in SystemSettings. 
chanzep
duplicate
Critical
Remote code execution using environment variables
lager1
Critical
•$1620•CVE-2024-3104
JSON Injection in login
chanzep
Medium
•$75•CVE-2024-3102
HTML Injection + Server-Side Template Injection (SSTI)
lohigowdain
duplicate
Medium
Path traversal via logo_filename leads to delete and read any files on the syste...
nhienit2010
duplicate
Critical
Race Condition when submit question for AI
oiiwroo
informative
Medium
Allowing SVG file upload in chatbot logo and user avatar upload function leads t...
dvtuna
informative
High
Race Condition when accept invite link
oiiwroo
duplicate
Medium
SSRF in /api/workspace/:slug/upload-link function via redirect
nhienit2010
duplicate
Critical
Application doesn't revoke api-key after enable multi-user mode
chanzep
duplicate
Critical
Escalation of privilege vulnerability allows access to administrative functions...
dvtuna
informative
High
EXIF metadata not stripped from JPG team logos
oiiwroo
informative
Medium
CSV injection
oiiwroo
duplicate
Medium
Priv escalation - an Admin user can send an API request to suspend all other Adm...
bl0ckbeard
self closed
Race Condition in /api/invite/
ch1nhpd
informative
Medium
SSRF in /api/workspace/:slug/upload-link function bypass CVE-2024-0759
nhienit2010
duplicate
Critical
Dos for all server by edit JWT in Authorization header
oiiwroo
duplicate
High
HTML injection [mintplex-labs/anything-llm]
kirtiso
duplicate
High
SSTI in chat in mintplex-labs/anything-llm
kirtiso
informative
Critical
SSRF check bypassed by Unicoding the IP address
hiu240900
duplicate
Critical
Shutting down the server by sending invalid upload request
hiu240900
Medium
•$75•CVE-2024-3153
AnythingLLM still has SSRF vulnerability
wh0amitz
High
•$450•CVE-2024-4084
Deactivate Multi-User Mode and Delete All Users
mvlttt
Critical
•$900•CVE-2024-3029
Failure to Invalidate Session On Password Reset and/or Change of invited user m...
kirtiso
informative
High
User can read and delete arbitrary files
mvlttt
High
•$450•CVE-2024-3028
XSS via javascript scheme at "Custom Footer Icons" function
hiu240900
informative
Medium
Users can escalate privileges by deactivating 'Multi-User Mode'.
mvlttt
Medium
•$75•CVE-2024-3101
Denial of Service (DoS). Due to Unrestricted Workspace Name Length
dailybee13
informative
Medium
Server Side Request forgery (SSRF) in upload-link endpoint
m0kr4n3
informative
Medium
Stored XSS on chat due to lack of output encoding
ph4nt0m-py
informative
Medium
Server Side Request Forgery leads to extract AWS Metadata (No proper fix impleme...
ph4nt0m-py
duplicate
Critical
csv/formula injection
ranjit-git
informative
Medium
removed user can see embed chat details after removed from team.
ranjit-git
not applicable
removed user still can perform all operation with api key
ranjit-git
informative
Critical
privilege escalation bug to add feedback to any chat
ranjit-git
informative
Medium
non-admin user can delete workspace
ranjit-git
informative
High
Mass assignment that leads to privilege escalation attack
tauron3
High
•$450•CVE-2024-3283
Arbitrary file deletion / reading via path traversal in logo photo upload and do...
williwollo
Critical
•$900•CVE-2024-3025
Race Condition in accepting user invites
rook1337
Medium
•$75•CVE-2024-2913
ssrf fix bypass
ranjit-git
informative
Critical
Anonymous access to import endpoint leads to anythingllm.db deletion/spoofing
dastaj
Critical
•$1500•CVE-2024-3279
Path traversal leads to anythingllm.db deletion
dastaj
High
•$750•CVE-2024-0549
Arbitrary file reading via path traversal in profile photo loading feature
williwollo
Critical
•$1500•CVE-2024-0550
huntr: mintplex-labs/anything-llm