Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1.
7.5CVSS
7.7AI Score
0.001EPSS
8.8CVSS
8.8AI Score
0.001EPSS
In mintplex-labs/anything-llm, a vulnerability exists in the thread update process that allows users with Default or Manager roles to escalate their privileges to Administrator. The issue arises from improper input validation when handling HTTP POST requests to the endpoint /workspace/:slug/thread/...
8.1CVSS
7.4AI Score
0.0004EPSS