CVE-2026-5627

Path Traversal in mintplex-labs/anything-llm

Published Apr 7, 2026 CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed

Description

A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within the `AgentFlows` component. The vulnerability arises from improper handling of user input in the `loadFlow` and `deleteFlow` methods in `server/utils/agentFlows/index.js`. Specifically, the combination of `path.join` and `normalizePath` allows attackers to bypass directory restrictions and access or delete arbitrary `.json` files on the server. This can lead to information disclosure, such as leaking sensitive configuration files containing API keys, or denial of service by deleting critical files like `package.json`. The issue is resolved in version 1.12.1.

Analysis

Technical impact

A path traversal flaw in the AgentFlows component of mintplex-labs/anything-llm allows an attacker to supply crafted file names to the loadFlow and deleteFlow functions, enabling arbitrary reading or deletion of .json files on the server. This vulnerability can expose sensitive configuration data, such as API keys, and can delete critical files like package.json, leading to data loss or denial of service. The weakness is a classic CWE‑29 type path validation defect.

Affected Systems

The issue affects all installations of mintplex-labs/anything‑llm up through version 1.9.1. The flaw is limited to the AgentFlows API endpoints and is fixed in release 1.12.1. Users running the earlier releases should verify their version and plan an upgrade.

Risk and Exploitability

With a CVSS score of 7.2 the vulnerability is considered high; its exploitability relies on sending crafted requests to the vulnerable endpoints. Attackers can trigger the flaw remotely via the exposed API; the attack vector is inferred to require authentication or network access, as the vulnerability is only reachable through the API endpoints. The EPSS score of < 1% indicates a very low but nonzero exploitation probability, and the vulnerability has not been catalogued in the CISA KEV list, but the high score indicates a significant risk.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

mintplex-labs

mintplex-labs/anything-llm

affected

Version	Status	Constraints
`unspecified`	affected	< 1.12.1

Configuration 1 [-]

cpe:2.3:a:mintplexlabs:anythingllm:*:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Miniplex Labs

Miniplex Labs/anything Lim

Version	Status	Scheme	Platform
`[0,1.12.1)`	affected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade mintplex‑labs/anything‑llm to version 1.12.1 or later
Restrict the loadFlow and deleteFlow endpoints to authenticated and authorized users only
Ensure file system permissions limit application access to the directory containing .json configuration files

Generated by OpenCVE AI on April 28, 2026 at 21:40 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.823% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://github.com/mintplex-labs/anything-llm/commit/3444b9b0aa6764d72d53670ab4b1aaccdc6b7017
https://huntr.com/bounties/597d41c5-7ea0-4786-80f4-bd536ec66374

History

Apr 24, 2026 2:00 PM First appearance in the feed. Affected versions updated. Affected vendors updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
First Time appeared		Mintplexlabs Mintplexlabs anythingllm
CPEs		cpe:2.3:a:mintplexlabs:anythingllm::::::::
Vendors & Products		Mintplexlabs Mintplexlabs anythingllm
Metrics		cvssV3_1 `{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}`

Apr 9, 2026 8:30 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Miniplex Labs Miniplex Labs miniplex Labs/anything Lim
Vendors & Products		Miniplex Labs Miniplex Labs miniplex Labs/anything Lim

Apr 7, 2026 3:15 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within the `AgentFlows` component. The vulnerability arises from improper handling of user input in the `loadFlow` and `deleteFlow` methods in `server/utils/agentFlows/index.js`. Specifically, the combination of `path.join` and `normalizePath` allows attackers to bypass directory restrictions and access or delete arbitrary `.json` files on the server. This can lead to information disclosure, such as leaking sensitive configuration files containing API keys, or denial of service by deleting critical files like `package.json`. The issue is resolved in version 1.12.1.
Title		Path Traversal in mintplex-labs/anything-llm
Weaknesses		CWE-29
References		https://github.com/mintplex-labs/anything-llm/commit/3444b9b0aa6764d72d53670ab4b1aaccdc6b7017 https://huntr.com/bounties/597d41c5-7ea0-4786-80f4-bd536ec66374
Metrics		cvssV3_0 `{'score': 9.1, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`