mintplexlabs records
74 published records for vendor mintplexlabs.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 14.9%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-918 Server-Side Request Forgery (SSRF)6
- CWE-400 Uncontrolled Resource Consumption5
- CWE-20 Improper Input Validation5
- CWE-23 Relative Path Traversal5
- CWE-306 Missing Authentication for Critical Function4
The weakness classes this vendor ships most often: where to look.
CWEAll records
74 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-6842Proof of concept | Exposure of Sensitive Information in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-306 | High7.5 | — | 31.1% | Mar 20, 2025 |
39Monitor | CVE-2024-3025No exploit | Path Traversal in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-23 | Critical9.9 | — | 1.0% | Apr 10, 2024 |
39Monitor | CVE-2024-3104No exploit | Remote Code Execution in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-78 | Critical9.8 | — | 1.0% | Jun 6, 2024 |
39Monitor | CVE-2023-4897No exploit | Relative Path Traversal in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-23 | Critical9.8 | — | 0.9% | Sep 11, 2023 |
39Monitor | CVE-2024-8196No exploit | Missing Authentication for Critical Function in mintplex-labs/anything-llmmintplexlabs · anythingllm desktop · CWE-306 | Critical9.8 | — | 0.8% | Mar 20, 2025 |
38Monitor | CVE-2024-3166No exploit | Cross-Site Scripting (XSS) Vulnerability in mintplex-labs/anything-llmmintplexlabs · anythingllm desktop · CWE-79 | Critical9.6 | — | 1.0% | Jun 6, 2024 |
38Monitor | CVE-2026-32626No exploit | AnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injectionmintplexlabs · anythingllm · CWE-79 | Critical9.6 | — | 0.7% | Mar 16, 2026 |
37Monitor | CVE-2024-3033No exploit | Improper Authorization in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-863 | Critical9.4 | — | 0.6% | Jun 6, 2024 |
36Monitor | CVE-2024-0404No exploit | Mass Assignment Vulnerability in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-915 | Critical9.1 | — | 0.8% | Apr 15, 2024 |
36Monitor | CVE-2023-5832No exploit | Improper Input Validation in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-20 | Critical9.1 | — | 0.7% | Oct 30, 2023 |
36Monitor | CVE-2024-3279No exploit | Improper Access Control in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-306 | Critical9.1 | — | 0.6% | Aug 12, 2024 |
35Monitor | CVE-2026-24477Proof of concept | AnythingLLM has key leak in `systemSettings.js`mintplexlabs · anythingllm · CWE-201 | High8.7 | — | 1.7% | Jan 26, 2026 |
35Monitor | CVE-2024-3150No exploit | Privilege Escalation in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-755 | High8.8 | — | 0.8% | Jun 6, 2024 |
35Monitor | CVE-2023-4899No exploit | SQL Injection in mintplex-labs/anything-llmmintplexlabs · anything-llm · CWE-89 | High8.8 | — | 0.8% | Sep 11, 2023 |
35Monitor | CVE-2024-0439No exploit | User can manually send request at manager permission to modify system configurationsmintplexlabs · anythingllm · CWE-269 | High8.8 | — | 0.6% | Feb 26, 2024 |
35Monitor | CVE-2023-5833No exploit | Improper Access Control in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-284 | High8.8 | — | 0.6% | Oct 30, 2023 |
35Monitor | CVE-2024-3152No exploit | Privilege Escalation and Local File Inclusion in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-918 | High8.8 | — | 0.6% | Jun 6, 2024 |
35Monitor | CVE-2026-48116No exploit | AnythingLLM: RCE via ripgrep --pre argument injection in filesystem-search-files agent skillmintplexlabs · anythingllm · CWE-77 | High8.8 | — | 0.5% | May 28, 2026 |
35Monitor | CVE-2024-3149No exploit | SSRF in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-918 | High8.8 | — | 0.5% | Jun 6, 2024 |
34Monitor | CVE-2024-13059No exploit | Path Traversal in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-29 | High7.2 | — | 21.3% | Feb 10, 2025 |
34Monitor | CVE-2024-3110No exploit | Stored XSS leading to admin account takeover in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-79 | High8.7 | — | 0.7% | Jun 6, 2024 |
33Monitor | CVE-2024-10109No exploit | Incorrect Authorization in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-863 | High8.3 | — | 0.5% | Mar 20, 2025 |
32Monitor | CVE-2024-0763No exploit | Improper validation of document removal parametermintplexlabs · anythingllm · CWE-22 | High8.1 | — | 0.9% | Feb 27, 2024 |
32Monitor | CVE-2024-0549No exploit | Relative Path Traversal in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-23 | High8.1 | — | 0.8% | Apr 15, 2024 |
32Monitor | CVE-2024-3029No exploit | Improper Input Validation in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-20 | High8.0 | — | 0.7% | Apr 15, 2024 |
- CVE-2024-684239Monitor
Exposure of Sensitive Information in mintplex-labs/anything-llm
HighCVSS 7.5Proof of conceptEPSS 31%mintplexlabs · anythingllmMar 20, 2025
- CVE-2024-302539Monitor
Path Traversal in mintplex-labs/anything-llm
CriticalCVSS 9.9No exploitEPSS 1%mintplexlabs · anythingllmApr 10, 2024
- CVE-2024-310439Monitor
Remote Code Execution in mintplex-labs/anything-llm
CriticalCVSS 9.8No exploitEPSS 1%mintplexlabs · anythingllmJun 6, 2024
- CVE-2023-489739Monitor
Relative Path Traversal in mintplex-labs/anything-llm
CriticalCVSS 9.8No exploitEPSS 1%mintplexlabs · anythingllmSep 11, 2023
- CVE-2024-819639Monitor
Missing Authentication for Critical Function in mintplex-labs/anything-llm
CriticalCVSS 9.8No exploitEPSS 1%mintplexlabs · anythingllm desktopMar 20, 2025
- CVE-2024-316638Monitor
Cross-Site Scripting (XSS) Vulnerability in mintplex-labs/anything-llm
CriticalCVSS 9.6No exploitEPSS 1%mintplexlabs · anythingllm desktopJun 6, 2024
- CVE-2026-3262638Monitor
AnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injection
CriticalCVSS 9.6No exploitEPSS 1%mintplexlabs · anythingllmMar 16, 2026
- CVE-2024-303337Monitor
Improper Authorization in mintplex-labs/anything-llm
CriticalCVSS 9.4No exploitEPSS 1%mintplexlabs · anythingllmJun 6, 2024
- CVE-2024-040436Monitor
Mass Assignment Vulnerability in mintplex-labs/anything-llm
CriticalCVSS 9.1No exploitEPSS 1%mintplexlabs · anythingllmApr 15, 2024
- CVE-2023-583236Monitor
Improper Input Validation in mintplex-labs/anything-llm
CriticalCVSS 9.1No exploitEPSS 1%mintplexlabs · anythingllmOct 30, 2023
- CVE-2024-327936Monitor
Improper Access Control in mintplex-labs/anything-llm
CriticalCVSS 9.1No exploitEPSS 1%mintplexlabs · anythingllmAug 12, 2024
- CVE-2026-2447735Monitor
AnythingLLM has key leak in `systemSettings.js`
HighCVSS 8.7Proof of conceptEPSS 2%mintplexlabs · anythingllmJan 26, 2026
- CVE-2024-315035Monitor
Privilege Escalation in mintplex-labs/anything-llm
HighCVSS 8.8No exploitEPSS 1%mintplexlabs · anythingllmJun 6, 2024
- CVE-2023-489935Monitor
SQL Injection in mintplex-labs/anything-llm
HighCVSS 8.8No exploitEPSS 1%mintplexlabs · anything-llmSep 11, 2023
- CVE-2024-043935Monitor
User can manually send request at manager permission to modify system configurations
HighCVSS 8.8No exploitEPSS 1%mintplexlabs · anythingllmFeb 26, 2024
- CVE-2023-583335Monitor
Improper Access Control in mintplex-labs/anything-llm
HighCVSS 8.8No exploitEPSS 1%mintplexlabs · anythingllmOct 30, 2023
- CVE-2024-315235Monitor
Privilege Escalation and Local File Inclusion in mintplex-labs/anything-llm
HighCVSS 8.8No exploitEPSS 1%mintplexlabs · anythingllmJun 6, 2024
- CVE-2026-4811635Monitor
AnythingLLM: RCE via ripgrep --pre argument injection in filesystem-search-files agent skill
HighCVSS 8.8No exploitEPSS 1%mintplexlabs · anythingllmMay 28, 2026
- CVE-2024-314935Monitor
SSRF in mintplex-labs/anything-llm
HighCVSS 8.8No exploitEPSS 1%mintplexlabs · anythingllmJun 6, 2024
- CVE-2024-1305934Monitor
Path Traversal in mintplex-labs/anything-llm
HighCVSS 7.2No exploitEPSS 21%mintplexlabs · anythingllmFeb 10, 2025
- CVE-2024-311034Monitor
Stored XSS leading to admin account takeover in mintplex-labs/anything-llm
HighCVSS 8.7No exploitEPSS 1%mintplexlabs · anythingllmJun 6, 2024
- CVE-2024-1010933Monitor
Incorrect Authorization in mintplex-labs/anything-llm
HighCVSS 8.3No exploitEPSS 1%mintplexlabs · anythingllmMar 20, 2025
- CVE-2024-076332Monitor
Improper validation of document removal parameter
HighCVSS 8.1No exploitEPSS 1%mintplexlabs · anythingllmFeb 27, 2024
- CVE-2024-054932Monitor
Relative Path Traversal in mintplex-labs/anything-llm
HighCVSS 8.1No exploitEPSS 1%mintplexlabs · anythingllmApr 15, 2024
- CVE-2024-302932Monitor
Improper Input Validation in mintplex-labs/anything-llm
HighCVSS 8.0No exploitEPSS 1%mintplexlabs · anythingllmApr 15, 2024