EUVD-2026-39009Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N
PR:H reflects mandatory manager/admin role; I:H and A:H reflect unconditional deletion of arbitrary users' parsed files; C:N as no read access is gained.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
3DescriptionCVE.org
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. From 1.11.1 until 1.14.1, userId/workspaceId scoping to the parsed-files read/delete paths was added. However, the POST /api/workspace/:slug/embed-parsed-file/:fileId flow still deletes the target file by primary key only, with no ownership check, inside two finally{} blocks that run even when the ownership-checked read fails. As a result a manager or admin (multi-user mode) can delete any other user's parsed file in any workspace - including workspaces they are not a member of - by enumerating integer fileIds. The server even returns "File not found" while still deleting the file. This vulnerability is fixed in 1.14.1.
AnalysisAI
Unauthorized deletion of parsed files in AnythingLLM versions 1.11.1 through 1.14.0 allows authenticated managers or admins to delete parsed files belonging to other users across any workspace by enumerating integer file IDs via the embed-parsed-file endpoint. A proof-of-concept exploit exists, but the attack requires high privileges and manual file ID discovery, limiting widespread exploitability. The issue is patched in version 1.14.1.
More in Anything Llm
View allSQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. Rated high severity (CVSS 8.8), this vulne
Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. Rated high sev
XSS in AnythingLLM 1.11.1 and earlier.
Argument-injection command execution in Mintplex Labs AnythingLLM before 1.13.0 lets an attacker who can chat with an ag
SQL injection in AnythingLLM versions 1.11.1 and earlier enables authenticated users to execute arbitrary SQL commands a
AnythingLLM versions 1.11.1 and earlier contain an authentication bypass vulnerability on default installations where th
Stored DOM-level XSS in AnythingLLM's chart caption rendering allows authenticated users in shared workspaces to inject
Path traversal in AnythingLLM's document folder listing endpoint on Windows allows authenticated low-privilege users to
Stale mobile device tokens in AnythingLLM survive single-user to multi-user mode migration with a null userId, allowing
The text-to-speech endpoint in AnythingLLM prior to v1.12.1 exposes an Insecure Direct Object Reference (IDOR) allowing
AnythingLLM versions 1.11.1 and earlier contain a Zip Slip path traversal vulnerability in the community plugin import f
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatti
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today