CVE-2026-88055 AnythingLLM: Stored XSS Due to Unescaped Server-Side HTML Concatenation in MetaGenerator
A manager can inject JavaScript via system preferences that executes when an admin visits the homepage, allowing admin account takeover.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-88055?
CVE-2026-88055 is a medium-severity cross-site scripting vulnerability in Mintplex-Labs anything-llm, published on 10 Sep 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.16.1 and earlier, the manager role can store meta_page_title or meta_page_favicon through /api/admin/system-preferences, and MetaGenerator inserts those values into production homepage HTML without escaping attribute values or text content. The values pass unchanged through server/models/systemSettings.js and reach MetaGenerator.generate() in server/index.js. #assembleMeta() in server/utils/boot/MetaGenerator.js concatenates the stored values into HTML. When an administrator visits the homepage /, injected JavaScript can read the administrator JWT and use it to create API keys, access or modify workspace and chat data, delete users, and perform other administrator actions. server/endpoints/admin.js accepts the manager-controlled settings before server/models/systemSettings.js returns them unchanged. No fixed version is available as of this review.
Weakness: CWE-79
Which versions are affected by CVE-2026-88055?
How do I fix CVE-2026-88055?
No fix published yet.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2026-88055 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-88055 exists.
Sources
Also known as GHSA-rh3m-xv7m-9jhf, MINI-6m8f-rcqp-v2p6.