CVE-2024-10513 Path Traversal in mintplex-labs/anything-llm
Attackers with manager role can exploit path traversal to move, download, and delete the database file, leading to data exposure and privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-10513?
CVE-2024-10513 is a high-severity path traversal vulnerability in Mintplexlabs Anythingllm, published on 20 Mar 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A path traversal vulnerability exists in the 'document uploads manager' feature of mintplex-labs/anything-llm, affecting the latest version prior to 1.2.2. This vulnerability allows users with the 'manager' role to access and manipulate the 'anythingllm.db' database file. By exploiting the vulnerable endpoint '/api/document/move-files', an attacker can move the database file to a publicly accessible directory, download it, and subsequently delete it. This can lead to unauthorized access to sensitive data, privilege escalation, and potential data loss.
Which versions are affected by CVE-2024-10513?
It affects 1 product.
Products include Mintplexlabs Anythingllm.
How do I fix CVE-2024-10513?
No fix has been published for CVE-2024-10513 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2024-10513 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-10513 exists.
Other vulnerabilities in Mintplexlabs Anythingllm
- CVE-2024-3025 Path Traversal in mintplex-labs/anything-llm
- CVE-2024-0455 SSRF on AWS deployed instances of AnythingLLM via /metadata
- CVE-2026-32626 AnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injection
- CVE-2024-3104 Remote Code Execution in mintplex-labs/anything-llm
- CVE-2024-3149 SSRF in mintplex-labs/anything-llm
Sources
Also known as GHSA-45p5-8q33-98hw.