CVE-2026-45403 AnythingLLM: filesystem-copy-file follows nested symlinks and copies files from outside the allowed directory
An attacker can copy files from outside the allowed directory into the application by exploiting symlink handling in the filesystem copy tool.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-45403?
CVE-2026-45403 is a low-severity path traversal vulnerability in Mintplexlabs Anythingllm, published on 28 May 2026. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, the AnythingLLM agent filesystem copy tool validates only the top-level source and destination paths. The recursive copy helper then descends into child entries using fs.stat() and copies files with fs.copyFile() without validating each child or rejecting symlinks. Because both APIs follow symlinks, a symlink nested inside an allowed source directory can point outside the allowed filesystem root and cause outside file contents to be copied into an allowed destination as a regular file. This vulnerability is fixed in 1.13.0.
Weakness: CWE-59
Which versions are affected by CVE-2026-45403?
It affects 1 product.
Products include Mintplexlabs Anythingllm.
How do I fix CVE-2026-45403?
Upgrade to a fixed version.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-45403 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-45403 exists.
Other vulnerabilities in Mintplexlabs Anythingllm
- CVE-2024-3025 Path Traversal in mintplex-labs/anything-llm
- CVE-2024-0455 SSRF on AWS deployed instances of AnythingLLM via /metadata
- CVE-2026-32626 AnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injection
- CVE-2024-3104 Remote Code Execution in mintplex-labs/anything-llm
- CVE-2024-3149 SSRF in mintplex-labs/anything-llm
Sources
Also known as GHSA-vjrp-43mm-j7vw, MINI-v8h6-h332-g9c7.