| Component | AnythingLLM |
| Severity | medium (CVSS 5.3) |
| CVSS vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| Published (NVD) | 2025-12-18 |
| Last modified | 2026-10-13 |
| Affected versions | anythingllm = 1.8.5 |
| Fixed in | see the vendor advisory |
| Weakness | CWE-306 |
| CISA KEV | not listed |
NVD description
An authentication bypass vulnerability exists in AnythingLLM v1.8.5 in via the /api/workspaces endpoint. The endpoint fails to implement proper authentication checks, allowing unauthenticated remote attackers to enumerate and retrieve detailed information about all configured workspaces. Exposed data includes: workspace identifiers (id, name, slug), AI model configurations (chatProvider, chatModel, agentProvider), system prompts (openAiPrompt), operational parameters (temperature, history length, similarity thresholds), vector search settings, chat modes, and timestamps.
What to do
- NVD lists no fixed version yet: follow the vendor advisory below and keep AnythingLLM off the public internet until a fix ships.
- Do not expose the component's API or UI to the internet without authentication in front of it.
Sources
- NVD: CVE-2025-63390
- https://gist.github.com/Cristliu/ba529c99abec87102e5ef36435d02a6d
- https://gist.github.com/Cristliu/0897bceac5fdc2d945304b5087a84f14
- https://github.com/Mintplex-Labs/anything-llm/issues
Other AnythingLLM CVEs
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.16.1 and ea...
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. From 1.0.0 to 1....
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. From 1.11.1 unti...
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0,...
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0,...
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0,...