CVE-2024-10109

A vulnerability in the mintplex-labs/anything-llm repository, as of commit 5c40419, allows low privilege users to access the sensitive API endpoint "/api/system/custom-models". This access enables them to modify the model's API key and base path, leading to potential API key leakage and denial of...

CVE-2024-10109: Incorrect Authorization

A vulnerability in the mintplex-labs/anything-llm repository, as of commit 5c40419, allows low privilege users to access the sensitive API endpoint "/api/system/custom-models". This access enables them to modify the model's API key and base path, leading to potential API key leakage and denial of...

PT-2025-12025

Name of the Vulnerable Software and Affected Versions mintplex-labs/anything-llm versions prior to the commit that fixes the issue affected versions not specified Description A vulnerability allows low privilege users to access the sensitive API endpoint "/api/system/custom-models". This access...