PatchTheCVEanythingllm vulnerabilities and fixes
Recent CVEs affecting anythingllm, with upgrade or downgrade steps. 2 tracked.
anythingllm has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-04-24. Highest priority: CVE-2026-5627 (score 44/100).
- CVE-2026-5627 HIGH 7.2 UPGRADE A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within
- CVE-2026-41318 MEDIUM 5.4 UPGRADE AnythingLLM is an application that turns pieces of content into context that any LLM can use as references dur
FAQ
How do I fix anythingllm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is anythingllm being exploited right now?
None of the tracked anythingllm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which anythingllm CVE should I patch first?
CVE-2026-5627 currently ranks highest (44/100): A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within.