CVE-2024-8196 Missing Authentication for Critical Function in mintplex-labs/anything-llm
Attackers can access the backend and delete workspace data because the desktop application binds to all interfaces without authentication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-8196?
CVE-2024-8196 is a critical missing authorization vulnerability in mintplex-labs/anything-llm, published on 20 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In mintplex-labs/anything-llm v1.5.11 desktop version for Windows, the application opens server port 3001 on 0.0.0.0 with no authentication by default. This vulnerability allows an attacker to gain full backend access, enabling them to perform actions such as deleting all data from the workspace.
Weakness: CWE-306
Which versions are affected by CVE-2024-8196?
It affects 1 product.
Products include Mintplexlabs Anythingllm Desktop.
How do I fix CVE-2024-8196?
No fix has been published for CVE-2024-8196 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2024-8196 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-8196 exists.
Other vulnerabilities in mintplex-labs/anything-llm
Sources
Also known as GHSA-2mv8-c3hx-xq6v.