anythingllm

Records9

1. closed5.5
   AnythingLLM AnythingLLM Stored Vulnerability in System Preferences

   Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-88055

   AI
2. closed5.9
   AnythingLLM Authentication Vulnerability in AnythingLLM Recovery Flow

   Patch now · Disclosed · since 10 Aug 2026 · CVE-2026-72917

   AI
3. closed5.4
   AnythingLLM AnythingLLM unescaped markdown chart captions vulnerability

   Patch now · Disclosed · since 24 Apr 2026 · CVE-2026-41318

   AI
4. closed7.2
   AnythingLLM CVE-2026-24478: AnythingLLM Path Traversal Leading to RCE

   Patch now · Disclosed · since 27 Jan 2026 · CVE-2026-24478

   AI
5. closed8.7
   AnythingLLM CVE-2026-24477: AnythingLLM API Key Exposure Vulnerability

   Patch now · Disclosed · since 27 Jan 2026 · CVE-2026-24477

   AI
6. closed5.3
   AnythingLLM CVE-2025-63390: Authentication bypass in AnythingLLM workspace API

   Patch now · Disclosed · since 18 Dec 2025 · CVE-2025-63390

   AI
7. closed9.6
   AnythingLLM Internal link-scraping SSRF vulnerability in AnythingLLM

   Patch now · Disclosed · since 27 Feb 2024 · CVE-2024-0759

   AI
8. closed9.9
   AnythingLLM CVE-2024-0455: AnythingLLM web scraper metadata credential exposure

   Patch now · Disclosed · since 26 Feb 2024 · CVE-2024-0455

   AI
9. closed7.5
   AnythingLLM CVE-2024-22422: AnythingLLM unauthenticated API route denial of service

   Patch now · Disclosed · since 19 Jan 2024 · CVE-2024-22422

   AI