The vulnerability allows an attacker who possesses a mobile device token created before a migration from single‑user to multi‑user mode to access data that should be restricted to another user. The token remains valid even though its device record has no associated user, and the authentication middleware accepts it in multi‑user mode. Because downstream handlers interpret the request as unscoped, they disclose workspace listings, thread metadata and chat content belonging to other users. This flaw is rooted in improper access control and the failure to enforce user scoping after mode change, as reflected by the related CWE identifiers.

Mintplex‑Labs AnythingLLM versions earlier than 1.13.0 are vulnerable. The issue was specifically observed in deployments that performed a single‑user to multi‑user migration while legacy device tokens remained in circulation.

The CVSS score of 2 indicates a low overall severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. Attackers would need possession of a pre‑migration mobile token, which can be obtained by any party that managed a device before the migration. Once a token is in hand, the exploitation process is straightforward: the attacker authenticates with the token and can retrieve unfiltered data belonging to other users. The high potential for data disclosure is limited by the low CVSS and the lack of a publicly disclosed exploit, but the risk remains significant for organizations that have not yet updated to a patched release.