What is the CVSS score of CVE-2026-32719?

CVE-2026-32719 has a CVSS 3.1 base score of 4.2 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of AI / ML are affected by CVE-2026-32719?

Organizations using AnythingLLM should be aware of moderate risk from CVE-2026-32719, a path traversal vulnerability rated CVSS 4.2. This could allow unauthorized file access.

How to fix or mitigate CVE-2026-32719?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Review file handling controls.

AI / ML CVE-2026-32719

MEDIUM

Path Traversal (CWE-22)

2026-03-13 GitHub_M

Path Traversal RCE AI / ML Anything Llm

4.2

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

4.2 MEDIUM

AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 13, 2026 - 22:01 vuln.today

CVE Published

Mar 13, 2026 - 21:25 nvd

MEDIUM 4.2

DescriptionGitHub Advisory

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, The ImportedPlugin.importCommunityItemFromUrl() function in server/utils/agents/imported.js downloads a ZIP file from a community hub URL and extracts it using AdmZip.extractAllTo() without validating file paths within the archive. This enables a Zip Slip path traversal attack that can lead to arbitrary code execution.

AnalysisAI

AnythingLLM versions 1.11.1 and earlier contain a Zip Slip path traversal vulnerability in the community plugin import functionality that fails to validate file paths during ZIP extraction. An authenticated attacker with high privileges can craft a malicious ZIP file containing path traversal sequences that, when imported via the community hub, extract files outside the intended directory and achieve arbitrary code execution on the server. While the CVSS score is moderate (4.2) due to high privilege requirements and user interaction, the vulnerability enables code execution and should be addressed promptly.

Technical ContextAI

The vulnerability exists in the ImportedPlugin.importCommunityItemFromUrl() function in server/utils/agents/imported.js, which uses the AdmZip library to extract downloaded ZIP archives without performing path validation or sanitization. The root cause is classified under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory, also known as Path Traversal), a well-established class of vulnerability where insufficient input validation allows attackers to manipulate file paths using sequences like '../' to escape intended directory boundaries. The AdmZip library, while functional for standard ZIP operations, does not inherently prevent Zip Slip attacks; developers must explicitly validate entry paths before extraction. AnythingLLM's plugin import mechanism downloads untrusted archives from a community hub URL and extracts them server-side, creating an attractive attack surface when combined with missing path validation.

RemediationAI

Immediately upgrade AnythingLLM to the latest patched version released after 1.11.1, which includes explicit path validation in the ImportedPlugin.importCommunityItemFromUrl() function and AdmZip extraction process. Consult the official AnythingLLM GitHub releases page and security advisories for the exact patched version number and installation instructions. As an interim workaround prior to patching, restrict the plugin import functionality by disabling the community hub import feature if not strictly required, enforce the principle of least privilege by removing plugin import permissions from non-administrative users, and isolate AnythingLLM instances from untrusted networks. Additionally, implement file system monitoring and access controls to detect or prevent unauthorized file writes outside the intended plugin directories. Once patched, validate the extraction by confirming all plugin files remain within their designated installation paths.