Secuno
ENNL
Book demo

CVE-2026-32617

Mintplexlabs Anythingllm vulnerability

7.1 HIGHPublic exploitEPSS 0.42%
  1. Published16 Mar 2026

Description

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, On default installations where no password or API key has been configured, all HTTP endpoints and the agent WebSocket lack authentication, and the server's CORS policy accepts any origin. AnythingLLM Desktop binds to 127.0.0.1 (loopback) by default. Modern browsers (Chrome, Edge, Firefox) implement Private Network Access (PNA). This explicitly blocks public websites from making requests to local IP addresses. Exploitation is only viable from within the same local network (LAN) due to browser-level blocking of public-to-private requests.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityHigh
Privileges requiredNone
User interactionRequired
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityLow
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L

Affected products

Mintplexlabs Anythingllm≤ 1.11.1

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-1095698.8
sandboxed.sh through 1.3.0 contains a container escape vulnerability that allows code…
CVE-2026-10395610.0
Missing authentication for critical function in the authentication dependency in Loom…
CVE-2026-1002919.8
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints…
CVE-2026-1026768.3
Electron is a framework for writing cross-platform desktop applications using…
CVE-2026-933548.1
Taskview Community before 1.56.0 contains a missing authentication vulnerability that…
CVE-2026-970558.1
SigNoz from v0.8.0 before v0.143.0 defaults the JWT tokenizer signing secret…

Frequently asked

Is CVE-2026-32617 being actively exploited?

CVE-2026-32617 is not in the CISA KEV catalog. A public exploit reference exists, so treat it as exploitable. Its EPSS exploit probability is 0.42%.

How severe is CVE-2026-32617?

CVE-2026-32617 has a CVSS 3.1 base score of 7.1, rated high. EPSS estimates a 0.42% probability of exploitation.

Which products are affected by CVE-2026-32617?

Affected products include Mintplexlabs Anythingllm.

How do I fix CVE-2026-32617?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2026-32617 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.