What is the CVSS score of CVE-2026-32626?

CVE-2026-32626 has a CVSS 3.1 base score of 9.6 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of AI / ML are affected by CVE-2026-32626?

AnythingLLM Desktop users running version 1.11.1 or earlier face critical risk of complete system compromise through malicious chat messages, with attackers able to execute arbitrary code without…

How to fix or mitigate CVE-2026-32626?

Within 24 hours: Inventory all AnythingLLM Desktop installations and restrict usage to air-gapped or non-critical systems only. Within 7 days: Contact vendor for patch timeline; if unavailable, evaluate alternative LLM desktop solutions or disable AnythingLLM Desktop enterprise-wide pending remediation. Within 30 days: Deploy patched version 1.11.2 or later across all endpoints, or complete migration to alternative tools.

AI / ML CVE-2026-32626

EUVD-2026-12105 CRITICAL

Cross-site Scripting (XSS) (CWE-79)

2026-03-13 GitHub_M

XSS RCE AI / ML Anything Llm

9.6

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.6 CRITICAL

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 13, 2026 - 21:01 euvd

EUVD-2026-12105

Analysis Generated

Mar 13, 2026 - 21:01 vuln.today

CVE Published

Mar 13, 2026 - 20:14 nvd

CRITICAL 9.6

DescriptionGitHub Advisory

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, AnythingLLM Desktop contains a Streaming Phase XSS vulnerability in the chat rendering pipeline that escalates to Remote Code Execution on the host OS due to insecure Electron configuration. This works with default settings and requires no user interaction beyond normal chat usage. The custom markdown-it image renderer in frontend/src/utils/chat/markdown.js interpolates token.content directly into the alt attribute without HTML entity escaping. The PromptReply component renders this output via dangerouslySetInnerHTML without DOMPurify sanitization - unlike HistoricalMessage which correctly applies DOMPurify.sanitize().