Mintplexlabs Anythingllm vulnerabilities
67 published vulnerabilities in Mintplexlabs Anythingllm. The most were published in 2024 (48), and 15 so far in 2026.
Mintplexlabs Anythingllm vulnerabilities by year
2023
2024
2025
2026
Most exploited Mintplexlabs Anythingllm vulnerabilities
- CVE-2024-3025 Path Traversal in mintplex-labs/anything-llm
- CVE-2024-0455 SSRF on AWS deployed instances of AnythingLLM via /metadata
- CVE-2026-32626 AnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injection
- CVE-2024-3104 Remote Code Execution in mintplex-labs/anything-llm
- CVE-2024-3149 SSRF in mintplex-labs/anything-llm
- CVE-2024-0765 Default user role exporting save state of instance
- CVE-2024-0550 Privileged User using traversal to read system files
- CVE-2024-0440 SSRF - file:// unsanitized access to underlying host files
- CVE-2026-5627 Path Traversal in mintplex-labs/anything-llm
- CVE-2024-3279 Improper Access Control in mintplex-labs/anything-llm
- CVE-2024-5211 Path traversal in mintplex-labs/anything-llm
- CVE-2024-3033 Improper Authorization in mintplex-labs/anything-llm
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.