CVE-2026-24477 AnythingLLM has key leak in `systemSettings.js`
Unauthenticated attackers can leak Qdrant API keys from the setup endpoint, gaining full read/write access to the vector database and confidential documents.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-24477?
CVE-2026-24477 is a high-severity vulnerability in Mintplexlabs Anythingllm, published on 26 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. If AnythingLLM prior to version 1.10.0 is configured to use Qdrant as the vector database with an API key, this QdrantApiKey could be exposed in plain text to unauthenticated users via the `/api/setup-complete` endpoint. Leakage of QdrantApiKey allows an unauthenticated attacker full read/write access to the Qdrant vector database instance used by AnythingLLM. Since Qdrant often stores the core knowledge base for RAG in AnythingLLM, this can lead to complete compromise of the semantic search / retrieval functionality and indirect leakage of confidential uploaded documents. Version 1.10.0 patches the issue.
Weakness: CWE-201
Which versions are affected by CVE-2026-24477?
It affects 1 product.
Products include Mintplexlabs Anythingllm.
How do I fix CVE-2026-24477?
No fix has been published for CVE-2026-24477 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-24477 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-24477 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Mintplexlabs Anythingllm
- CVE-2024-3025 Path Traversal in mintplex-labs/anything-llm
- CVE-2024-0455 SSRF on AWS deployed instances of AnythingLLM via /metadata
- CVE-2026-32626 AnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injection
- CVE-2024-3104 Remote Code Execution in mintplex-labs/anything-llm
- CVE-2024-3149 SSRF in mintplex-labs/anything-llm
Sources
Also known as GHSA-gm94-qc2p-xcwf.