CVE-2026-32626

🗓️ 13 Mar 2026 20:14:30Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 68 Views🌐 WEB

AnythingLLM versions 1.11.1 and earlier have streaming cross site scripting in chat rendering enabling remote code execution.

Reporter	Title	Published	Views	Family All 13
attackerkb	CVE-2026-32626	13 Mar 202620:14	–	attackerkb
BDU FSTEC	LLM system Frontend XSS	31 Mar 202600:00	–	bdu_fstec
Circl	CVE-2026-32626	14 Mar 202601:30	–	circl
CNNVD	AnythingLLM Cross-Site Script Vulnerability	16 Mar 202600:00	–	cnnvd
Cvelist	CVE-2026-32626 AnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injection	13 Mar 202620:14	–	cvelist
EUVD	EUVD-2026-12105	13 Mar 202620:14	–	euvd
Mend	CVE-2026-32626	13 Mar 202620:14	–	mend
NVD	CVE-2026-32626	16 Mar 202614:19	–	nvd
osv_cve	CVE-2026-32626 AnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injection	13 Mar 202620:14	–	osv_cve
Positive Technologies	PT-2026-25378	13 Mar 202600:00	–	ptsecurity

NVD

Vulners

Node

mintplexlabs anythingllmRange≤1.11.1

[
  {
    "vendor": "Mintplex-Labs",
    "product": "anything-llm",
    "versions": [
      {
        "version": "<= 1.11.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/Mintplex-Labs/anything-llm/commit/9e2d144dc8be6fab29f560f5bcdaa9ef7dbb4214
github	www.github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-rrmw-2j6x-4mf2

Parameter	Position	Path	Description	CWE
token.content	request body	/chat	Streaming Phase XSS in the chat rendering pipeline where token.content is interpolated into the alt attribute of an image without escaping and rendered via dangerouslySetInnerHTML.	CWE-79

17 Jun 2026 10:36Current

8.3High risk

Vulners AI Score8.3

CVSS 3.19.6

EPSS0.00734

SSVC

CWE-79