CVE-2026-42456
CVE-2026-42456 is a medium-severity vulnerability in Mintplexlabs Anythingllm with a CVSS 3.x base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-639.
Key facts
- Severity: Medium (CVSS 3.x base score 4.3)
- EPSS exploit prediction: 0% (22nd percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2026-28865
- Weakness: CWE-639
- Affected product: Mintplexlabs Anythingllm
- Published:
- Last modified:
Description
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, GET /api/workspace/:slug/tts/:chatId in AnythingLLM returns the text-to-speech audio for another user's chat response within the same workspace because the route validates workspace membership but does not enforce ownership of the targeted chat row. As a result, an authenticated user can access another user's private assistant response in audio form if the chatId is known or guessed. This constitutes an insecure direct object reference (IDOR) affecting private chat response content exposed through the TTS endpoint. This issue has been patched in version 1.12.1.
Frequently asked questions
- What is CVE-2026-42456?
- AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, GET /api/workspace/:slug/tts/:chatId in AnythingLLM returns the text-to-speech audio for another user's chat response within the same workspace because the route validates workspace membership but does not enforce ownership of the targeted chat row. As a result, an authenticated user can access another user's private assistant response in audio form if the chatId is known or guessed. This constitutes an insecure direct object reference (IDOR) affecting private chat response content exposed through the TTS endpoint. This issue has been patched in version 1.12.1.
- How severe is CVE-2026-42456?
- CVE-2026-42456 has a CVSS 3.x base score of 4.3, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.
- Is CVE-2026-42456 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (22nd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2026-42456?
- CVE-2026-42456 affects Mintplexlabs Anythingllm. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2026-42456?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2026-42456 have an EU (EUVD) identifier?
- Yes. CVE-2026-42456 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-28865.
- When was CVE-2026-42456 published?
- CVE-2026-42456 was published on 2026-05-08 and last updated on 2026-06-17.
References
- https://github.com/Mintplex-Labs/anything-llm/commit/4f3f77119d342e5489d1ba7533ad6d51bdcd565f
- https://github.com/Mintplex-Labs/anything-llm/releases/tag/v1.12.1
- https://github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-jwqg-jfg3-x5vv
Affected products (1)
- cpe:2.3:a:mintplexlabs:anythingllm:*:*:*:*:*:*:*:*
More vulnerabilities in Mintplexlabs Anythingllm
- CVE-2024-3025 — Critical (CVSS 9.9): mintplex-labs/anything-llm is vulnerable to path traversal attacks due to insufficient validation of user-supplied…
- CVE-2024-3104 — Critical (CVSS 9.8): A remote code execution vulnerability exists in mintplex-labs/anything-llm due to improper handling of environment…
- CVE-2023-4897 — Critical (CVSS 9.8): Relative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1.
- CVE-2026-32626 — Critical (CVSS 9.6): AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during…
- CVE-2024-3033 — Critical (CVSS 9.4): An improper authorization vulnerability exists in the mintplex-labs/anything-llm application, specifically within the…
- CVE-2024-3279 — Critical (CVSS 9.1): An improper access control vulnerability exists in the mintplex-labs/anything-llm application, specifically within the…
All CVEs affecting Mintplexlabs Anythingllm →
Other CWE-639 (Authorization Bypass Through User-Controlled Key (IDOR)) vulnerabilities
- CVE-2025-40805 — Critical (CVSS 10.0): Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an…
- CVE-2024-45032 — Critical (CVSS 10.0): A vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5), Industrial Edge…
- CVE-2026-34037 — Critical (CVSS 9.9): Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to…
- CVE-2026-52782 — Critical (CVSS 9.9): OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is an IDOR through…
- CVE-2026-45552 — Critical (CVSS 9.9): Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior,…
- CVE-2026-29200 — Critical (CVSS 9.9): A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and…
Browse all CWE-639 (Authorization Bypass Through User-Controlled Key (IDOR)) vulnerabilities →