CVE-2026-24478

CVE-2026-24478 — AnythingLLM is affected by a prior to 1.10.0 path traversal in the DrupalWiki integration that allows a malicious admin (or an attacker tricking an admin) to write arbitrary server files, enabling Remote Code Execution (RCE) by overwriting configuration files or adding scripts. M...