PatchTheCVEanythingllm desktop vulnerabilities and fixes
Recent CVEs affecting anythingllm desktop, with upgrade or downgrade steps. 2 tracked.
Also searched as: anythingllmdesktop.
anythingllm desktop has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-03-20. Highest priority: CVE-2024-3166 (score 59/100).
- CVE-2024-3166 CRITICAL 9.6 UPGRADE UPGRADE A Cross-Site Scripting (XSS) vulnerability exists in mintplex-labs/anything-llm, affecting both the desktop ap
- CVE-2024-8196 CRITICAL 9.8 UPGRADE In mintplex-labs/anything-llm v1.5.11 desktop version for Windows, the application opens server port 3001 on 0
FAQ
How do I fix anythingllm desktop vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is anythingllm desktop being exploited right now?
None of the tracked anythingllm desktop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which anythingllm desktop CVE should I patch first?
CVE-2024-3166 currently ranks highest (59/100): A Cross-Site Scripting (XSS) vulnerability exists in mintplex-labs/anything-llm, affecting both the desktop ap.