Is there a patch available for CVE-2026-55611?

Yes, a patch is available for CVE-2026-55611. Update the affected software to the latest version immediately.

Anything Llm CVE-2026-55611

EUVD-2026-39009 NONE

Authorization Bypass Through User-Controlled Key (CWE-639)

2026-06-24 GitHub_M

Authentication Bypass Anything Llm Mintplex Labs

View

Vulnerability Assessment

Weakness

CWE

CWE-639

OWASP Top 10:2025

A01:2025 - Broken Access Control

ASVS 5.0

V8 - Authorization Object-level authorization, IDOR prevention

Awaiting Data No severity or threat signals available yet. Label will update when CVSS score is published or threat intelligence arrives.

Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Jul 27, 2026

Unauthorized deletion of parsed files in AnythingLLM versions 1.11.1 through 1.14.0 allows authenticated managers or admins to delete parsed files belonging to other users across any workspace by enumerating integer file IDs via the embed-parsed-file endpoint. A proof-of-concept exploit exists, but the attack requires high privileges and manual file ID discovery, limiting widespread exploitability. The issue is patched in version 1.14.1.

Affected VersionsENISA

anything-llm < 1.14.1

Affected Packages

euvd anything_llm fix: 1.14.1

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Know when Anything Llm gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (GitHub_M) PRIMARY 0.0 NONE

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N

vuln.today AI 6.5 MEDIUM

PR:H reflects mandatory manager/admin role; I:H and A:H reflect unconditional deletion of arbitrary users' parsed files; C:N as no read access is gained.

3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Jun 24, 2026 - 19:17 EUVD

DescriptionCVE.org

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. From 1.11.1 until 1.14.1, userId/workspaceId scoping to the parsed-files read/delete paths was added. However, the POST /api/workspace/:slug/embed-parsed-file/:fileId flow still deletes the target file by primary key only, with no ownership check, inside two finally{} blocks that run even when the ownership-checked read fails. As a result a manager or admin (multi-user mode) can delete any other user's parsed file in any workspace - including workspaces they are not a member of - by enumerating integer fileIds. The server even returns "File not found" while still deleting the file. This vulnerability is fixed in 1.14.1.

Threat Intelligence Overview

EPSS Score

0.2%

Top 86% exploitable

Data Quality

6 sources

Confidence: High

EUVD

NVD

CVE.org

EPSS

Vulnrichment

GitHub

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity NONE

CISA KEV No

Public POC No

EPSS 0.2%

Patch available Yes

Active threat No

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

Awaiting Data No severity or threat signals available yet. Label will update when CVSS score is published or threat intelligence arrives.

SSVC AssessmentENISA

SSVC Decision· derived

Scheduled

Exploitation

Poc

System Exposure· derived

Open

Automatable

Human Impact· derived

Medium

Technical Impact

Partial

Attack Technique

Authentication Bypass CRITICAL

Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.

More in Anything Llm

View all

CVE-2023-4899 HIGH This Week POC

8.8 Sep 12

SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. Rated high severity (CVSS 8.8), this vulne

CVE-2023-4898 HIGH This Week POC

7.5 Sep 12

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. Rated high sev

CVE-2026-32626 CRITICAL Act Now

9.6 Mar 13

XSS in AnythingLLM 1.11.1 and earlier.

CVE-2026-48116 HIGH This Week

8.8 May 28

Argument-injection command execution in Mintplex Labs AnythingLLM before 1.13.0 lets an attacker who can chat with an ag

CVE-2026-32628 HIGH This Week

7.7 Mar 13

SQL injection in AnythingLLM versions 1.11.1 and earlier enables authenticated users to execute arbitrary SQL commands a

CVE-2026-32617 HIGH This Week

7.1 Mar 13

AnythingLLM versions 1.11.1 and earlier contain an authentication bypass vulnerability on default installations where th

CVE-2026-88055 MEDIUM This Month

5.5 Sep 10

Stored XSS in AnythingLLM 1.16.1 and earlier enables a manager-role user to inject arbitrary JavaScript into the applica

CVE-2026-41318 MEDIUM This Month

5.4 Apr 24

Stored DOM-level XSS in AnythingLLM's chart caption rendering allows authenticated users in shared workspaces to inject

CVE-2026-48789 MEDIUM This Month

4.3 Jun 24

Path traversal in AnythingLLM's document folder listing endpoint on Windows allows authenticated low-privilege users to

CVE-2026-47713 MEDIUM This Month

4.3 May 28

Stale mobile device tokens in AnythingLLM survive single-user to multi-user mode migration with a null userId, allowing

CVE-2026-42456 MEDIUM This Month

4.3 May 08

The text-to-speech endpoint in AnythingLLM prior to v1.12.1 exposes an Insecure Direct Object Reference (IDOR) allowing

CVE-2026-32719 MEDIUM This Month

4.2 Mar 13

AnythingLLM versions 1.11.1 and earlier contain a Zip Slip path traversal vulnerability in the community plugin import f

Same weakness CWE-639 – Authorization Bypass Through User-Controlled Key

View all

CVE-2024-50483 CRITICAL

9.8

CVE-2026-55255 HIGH POC

8.4

CVE-2025-3605 CRITICAL POC

9.8

CVE-2022-3805 HIGH POC

8.6

CVE-2025-5947 CRITICAL POC

9.8

CVE-2025-67165 CRITICAL POC

9.8

CVE-2026-18315 CRITICAL POC

9.8

CVE-2020-36923 CRITICAL POC

9.8

Same technique Authentication Bypass

View all

CVE-2015-3306 CRITICAL POC

10.0

CVE-2023-22515 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2013-2465 CRITICAL POC

9.8

CVE-2011-3544 CRITICAL POC

9.8

CVE-2022-40684 CRITICAL POC

9.8

CVE-2025-61882 CRITICAL POC

9.8

CVE-2024-0012 CRITICAL POC

9.3

References

Advisories & patches

REF https://github.com/Mintplex-Labs/anything-llm/commit/34a42a33eaafe78b1e4020995ce8e9fd34d26c65 REF https://github.com/Mintplex-Labs/anything-llm/commit/683fe3dfdc74b6d94c445a25bb0f2f218665a4c6 REF https://github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-r872-gr59-vf5w

Search Externally

GitHub PoC

Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC

Back