AnythingLLM
Newest record 2026-09-10 · 25 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Exploited or KEV-listed · 0
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
No record for AnythingLLM has confirmed exploitation or a KEV flag.
Disclosures by month · last 24 months
Disclosed CVEs, no confirmed exploitation · 25
- closed5.5AnythingLLM AnythingLLM Stored Vulnerability in System Preferences
Disclosed · since 10 Sep 2026 · CVE-2026-88055
AI - closed5.9AnythingLLM Authentication Vulnerability in AnythingLLM Recovery Flow
Disclosed · since 10 Aug 2026 · CVE-2026-72917
AI - closed4.3AnythingLLM CVE-2026-48789: AnythingLLM path traversal vulnerability on Windows
Disclosed · since 24 Jun 2026 · CVE-2026-48789
AI - closed0.0AnythingLLM CVE-2026-55611: AnythingLLM missing ownership check on file deletion endpoint
Disclosed · since 24 Jun 2026 · CVE-2026-55611
AI - closed4.3AnythingLLM AnythingLLM Authentication Flaw Permits Unauthorized Workspace Access
Disclosed · since 28 May 2026 · CVE-2026-47713
AI - closed2.5AnythingLLM CVE-2026-45403: File copy traversal vulnerability in AnythingLLM
Disclosed · since 28 May 2026 · CVE-2026-45403
AI - closed8.8AnythingLLM CVE-2026-48116: Script execution vulnerability in AnythingLLM agent skill
Disclosed · since 28 May 2026 · CVE-2026-48116
AI - closed4.3AnythingLLM CVE-2026-42456: Insecure direct object reference in AnythingLLM tts endpoint
Disclosed · since 8 May 2026 · CVE-2026-42456
AI - closed5.4AnythingLLM AnythingLLM unescaped markdown chart captions vulnerability
Disclosed · since 24 Apr 2026 · CVE-2026-41318
AI - closed6.4AnythingLLM CVE-2026-32719: AnythingLLM Zip Slip Path Traversal Vulnerability
Disclosed · since 16 Mar 2026 · CVE-2026-32719
AI - closed8.8AnythingLLM CVE-2026-32628: AnythingLLM SQL Injection in SQL Agent
Disclosed · since 16 Mar 2026 · CVE-2026-32628
AI - closed3.8AnythingLLM CVE-2026-32715: AnythingLLM Privilege Escalation and Credential Exposure
Disclosed · since 16 Mar 2026 · CVE-2026-32715
AI - closed2.7AnythingLLM CVE-2026-32717: API key bypass for suspended users in AnythingLLM
Disclosed · since 16 Mar 2026 · CVE-2026-32717
AI - closed9.6AnythingLLM CVE-2026-32626: XSS to RCE vulnerability in AnythingLLM desktop chat
Disclosed · since 16 Mar 2026 · CVE-2026-32626
AI - closed7.5AnythingLLM CVE-2026-32617: Authentication bypass and loose CORS in AnythingLLM
Disclosed · since 16 Mar 2026 · CVE-2026-32617
AI - closed7.2AnythingLLM CVE-2026-24478: AnythingLLM Path Traversal Leading to RCE
Disclosed · since 27 Jan 2026 · CVE-2026-24478
AI - closed8.7AnythingLLM CVE-2026-24477: AnythingLLM API Key Exposure Vulnerability
Disclosed · since 27 Jan 2026 · CVE-2026-24477
AI - closed5.3AnythingLLM AnythingLLM Password Recovery Username Enumeration Flaw
Disclosed · since 3 Jan 2026 · CVE-2026-21484
AI - closed5.3AnythingLLM CVE-2025-63390: Authentication bypass in AnythingLLM workspace API
Disclosed · since 18 Dec 2025 · CVE-2025-63390
AI - closed4.3AnythingLLM CVE-2024-13060: Access control flaw in AnythingLLM profile picture access
Disclosed · since 20 Mar 2025 · CVE-2024-13060
AI - closed0.0AnythingLLM CVE-2024-3570: Stored Cross-Site Scripting in AnythingLLM
Disclosed · since 10 Apr 2024 · CVE-2024-3570
AI - closed9.6AnythingLLM CVE-2024-0765: AnythingLLM Data Exfiltration Vulnerability
Disclosed · since 3 Mar 2024 · CVE-2024-0765
AI - closed9.6AnythingLLM Internal link-scraping SSRF vulnerability in AnythingLLM
Disclosed · since 27 Feb 2024 · CVE-2024-0759
AI - closed9.9AnythingLLM CVE-2024-0455: AnythingLLM web scraper metadata credential exposure
Disclosed · since 26 Feb 2024 · CVE-2024-0455
AI - closed7.5AnythingLLM CVE-2024-22422: AnythingLLM unauthenticated API route denial of service
Disclosed · since 19 Jan 2024 · CVE-2024-22422
AI
Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.