What is the CVSS score of CVE-2026-24478?

CVE-2026-24478 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of AI / ML are affected by CVE-2026-24478?

AnythingLLM contains a high-severity vulnerability (CVE-2026-24478, CVSS 7.2) with public exploits available, though current exploitation likelihood remains low at 0.2% EPSS.

Is there a public PoC exploit available for CVE-2026-24478?

Yes, a public proof-of-concept exploit is available for CVE-2026-24478. Prioritise patching immediately. EPSS: 0.2%.

How to fix or mitigate CVE-2026-24478?

Within 24 hours: Inventory all AnythingLLM deployments and assess criticality of data processed. Within 7 days: Implement network segmentation to restrict AnythingLLM access, disable non-essential features if possible, and establish enhanced monitoring for suspicious activity. Within 30 days: Maintain continuous patch readiness, contact vendor for ETA on security update, and evaluate alternative solutions if remediation timeline is unacceptable.

AI / ML CVE-2026-24478

HIGH

Path Traversal (CWE-22)

2026-01-27 security-advisories@github.com

Drupal RCE Path Traversal AI / ML Anythingllm

7.2

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

PoC Detected

Jan 28, 2026 - 15:52 vuln.today

Public exploit code

CVE Published

Jan 27, 2026 - 00:15 nvd

HIGH 7.2

DescriptionGitHub Advisory

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.10.0, a critical Path Traversal vulnerability in the DrupalWiki integration allows a malicious admin (or an attacker who can convince an admin to configure a malicious DrupalWiki URL) to write arbitrary files to the server. This can lead to Remote Code Execution (RCE) by overwriting configuration files or writing executable scripts. Version 1.10.0 fixes the issue.

AnalysisAI

AnythingLLM versions prior to 1.10.0 contain a path traversal vulnerability in the DrupalWiki integration that allows malicious administrators or attackers with admin privileges to write arbitrary files to the server, potentially achieving remote code execution through configuration file overwriting or malicious script injection. Public exploit code exists for this vulnerability, and no patch is currently available for affected deployments. The attack requires high-level privileges but carries critical risk due to the ability to completely compromise server integrity.

Technical ContextAI

Classified as CWE-22 (Path Traversal). Affects Anythingllm. AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.10.0, a critical Path Traversal vulnerability in the DrupalWiki integration allows a malicious admin (or an attacker who can convince an admin to configure a malicious DrupalWiki URL) to write arbitrary files to the server. This can lead to Remote Code Execution (RCE) by overwriting configuration files or writing executable scripts. Version 1.10.0 fixes t

RemediationAI

Monitor vendor advisories for a patch. Validate and sanitize file path inputs. Use allowlists. Restrict network access to the affected service where possible.