A mass assignment vulnerability exists in the `/api/invite/:code` endpoint of the mintplex-labs/anything-llm repository, allowing unauthorized creation of high-privileged accounts. By intercepting and modifying the HTTP request during the account creation process via an invitation link, an attacker can add a `role` property with `admin` value, thereby gaining administrative access. This issue arises due to the lack of property allowlisting and blocklisting, enabling the attacker to exploit the system and perform actions as an administrator.
During account registration via an invitation link, the application processes an HTTP request without filtering (allowlisting/blocklisting) permitted fields. An attacker can intercept and modify the HTTP request by adding a `role` field with the value `admin` to its content. The lack of server-side validation causes the system to accept this value and create an account with administrator privileges instead of standard privileges intended for invited users.
The attacker gains full administrator privileges in the anything-llm application, allowing them to manage the system, access data, and perform any administrative actions. High confidentiality and integrity of data processed by the application is at risk.
The application should be updated to a version containing commit 8cd3a92c660b202655d99bee90b2864694c99946, which introduces proper validation of fields transmitted during account registration. Details are available in the vendor's references on GitHub and on the huntr.com platform.
The mintplex-labs/anything-llm application — versions indicated in vendor references (fix commit: 8cd3a92c660b202655d99bee90b2864694c99946)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NMintplexlabs Anythingllm
APPMintplexlabs< 1.0.0
Related vulnerabilities
XSS eskalujący do RCE w AnythingLLM Desktop poprzez podatny renderer Electron
Nieprawidłowa kontrola dostępu w AnythingLLM — nieautoryzowana manipulacja bazą danych
RCE poprzez command injection w Mintplex Labs AnythingLLM
Brak autoryzacji w AnythingLLM — destrukcyjny dostęp do VectorDB
Path Traversal w AnythingLLM — odczyt i usunięcie plików przez logo filename