Executive brief
AnythingLLM is an application that organizes documents and content for use with Large Language Models (LLMs). A security flaw in the Windows version of the software allows users with valid API access to view file metadata and folder contents outside of the designated documents directory. This could lead to the unauthorized disclosure of sensitive file names or directory structures on the host server.
Technical details
A path traversal vulnerability (CWE-22) exists in the 'document folder listing' route of AnythingLLM when deployed on Windows. The vulnerability stems from a flaw in the shared path containment helper, which correctly filters POSIX-style '../' sequences but fails to account for Windows-style parent paths (e.g., '..') returned by the path.relative() function. An attacker with a valid API key can provide an encoded absolute Windows path to the 'GET /v1/documents/folder/:folderName' endpoint to bypass directory restrictions. This allows for the unauthorized listing of JSON document metadata from sibling folders or other directories on the host system. The issue is resolved in version 1.13.0.
Affected products
- Mintplex-Labs AnythingLLM < 1.13.0
Timeline
- 2026-06-01: advisory: Initial disclosure on GitHub
- 2026-06-24: disclosed: CVE published to NVD
- 2026-06-24: patched: Fix released in version 1.13.0