anything-llm 安全漏洞

anything-llm is an all-in-one desktop and Docker AI application open-sourced by Mintplex. A security vulnerability exists in version 296f041 of anything-llm that stems from the presence of path traversal in the normalizePath function, which could lead to arbitrary file reads, writes, and elevatio...