anythingllm vulnerabilities

CVEs whose affected-version data names the anythingllm package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-63390Medium· 5.3

9mo ago

An authentication bypass vulnerability exists in AnythingLLM v1.8.5 in via the /api/workspaces endpoint

An authentication bypass vulnerability exists in AnythingLLM v1.8.5 in via the /api/workspaces endpoint. The endpoint fails to implement proper authentication checks, allowing unauthenticated remote attackers to enumerate and retrieve de…

▾ Sunlitmintplexlabs · anythingllmEPSS 0.55%via NVD