PatchTheCVECVE-2026-48116: AnythingLLM is an application that turns pieces of content into context that any LLM can use as references dur
CVE-2026-48116 is a high-severity flaw (CVSS 7.5) affecting anythingllm. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, the filesystem-search-files agent skill passes its LLM-controlled pattern parameter to ripgrep as a positional argument without a -- end-of-options separator. ripgrep parses any argument that starts with - as an option, so a pattern of --pre=/bin/sh turns ripgrep into a script executor: it runs /bin/sh <file
Why this priority
- High severity
- Public exploit reference
A fixed release or distro patch exists.
Last updated 2026-07-21 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-48116?
anythingllm: upgrade to 1.13.0. Exact commands for each OS are on this page.
Is CVE-2026-48116 being exploited?
CVE-2026-48116 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-48116 affect?
CVE-2026-48116 affects anythingllm. Severity is high (CVSS 7.5). AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, the filesystem-search-files agent skill passes its LLM-controlled pattern parameter to ripgrep as a
How urgent is CVE-2026-48116?
Priority 39/100. High severity; Public exploit reference
Related CVEs
- CVE-2026-5627 HIGH 7.2 UPGRADE A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within
- CVE-2026-41318 MEDIUM 5.4 UPGRADE AnythingLLM is an application that turns pieces of content into context that any LLM can use as references dur
- CVE-2026-42456 MEDIUM 4.3 UPGRADE AnythingLLM is an application that turns pieces of content into context that any LLM can use as references dur
- CVE-2026-47713 LOW 2.0 UPGRADE AnythingLLM is an application that turns pieces of content into context that any LLM can use as references dur
- CVE-2026-45403 LOW 2.0 UPGRADE AnythingLLM is an application that turns pieces of content into context that any LLM can use as references dur