CVE-2026-48116

creationtimestamp| type| source ---|---|--- 2026-05-28 23:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmx4t5whs227 2026-07-10 21:29:01+00:00| seen| https://bsky.app/profile/smit-artem.bsky.social/post/3mqd3qxt5cq2f...

CVE-2026-48116

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, the filesystem-search-files agent skill passes its LLM-controlled pattern parameter to ripgrep as a positional argument without a -- end-of-options separato...