CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 11:40 UTC)

What this means for you

This week: 5,499 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,499; Show in the list
Critical, last 7 days: 358; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product mintplexlabs:anythingllm. Show all products

16 CVEs, showing 1 to 16

CVE	Severity	Title	Published
CVE-2025-63390	Medium 5.3	An authentication bypass vulnerability exists in AnythingLLM v1.8.5 in via the /api/workspaces endpoint.	Dec 18, 2025
CVE-2026-21484	Medium 5.3	AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.	Jan 3, 2026
CVE-2026-24477	High 7.5	AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.	Jan 27, 2026
CVE-2026-24478	High 7.2	AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.	Jan 27, 2026
CVE-2026-32617	High 7.5	AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.	Mar 16, 2026
CVE-2026-32626	Critical 9.6	AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.	Mar 16, 2026
CVE-2026-32628	High 8.8	AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.	Mar 16, 2026
CVE-2026-32715	Low 3.8	AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.	Mar 16, 2026
CVE-2026-32717	Low 2.7	AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.	Mar 16, 2026
CVE-2026-32719	Medium 6.4	AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.	Mar 16, 2026
CVE-2026-5627	High 7.2	A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within the `AgentFlows` component.	Apr 7, 2026
CVE-2026-41318	Medium 5.4	AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.	Apr 24, 2026
CVE-2026-42456	Medium 4.3	AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.	May 8, 2026
CVE-2026-45403	Low 2.5	AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.	May 28, 2026
CVE-2026-47713	Medium 4.3	AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.	May 28, 2026
CVE-2026-48116	High 8.8	AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.	May 28, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.