Anythingllm Desktop
1 CVEs
product
Monthly
In mintplex-labs/anything-llm v1.5.11 desktop version for Windows, the application opens server port 3001 on 0.0.0.0 with no authentication by default. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Microsoft
Authentication Bypass
Anythingllm Desktop
Windows
NVD
GitHub
CVSS 3.0
9.8
EPSS
0.2%
EPSS 0%
CVSS 9.8
CRITICAL
POC
PATCH
Act Now
In mintplex-labs/anything-llm v1.5.11 desktop version for Windows, the application opens server port 3001 on 0.0.0.0 with no authentication by default. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Microsoft
Authentication Bypass
Anythingllm Desktop
+1
NVD
GitHub