An improper access control vulnerability exists in the mintplex-labs/anything-llm application, specifically within the import endpoint. This vulnerability allows an anonymous attacker, without an account in the application, to import their own database file, leading to the deletion or spoofing of the existing `anythingllm.db` file. By exploiting this vulnerability, attackers can serve malicious data to users or collect information about them. The vulnerability stems from the application's failure to properly restrict access to the data-import functionality, allowing unauthorized database manipulation.
The AnythingLLM application does not enforce proper access control on the data import function — the endpoint responsible for import is accessible without authentication. An attacker can send a crafted database file to this endpoint, which replaces or deletes the original `anythingllm.db` file. As a result, the application begins operating on data supplied by the attacker instead of the original user data.
An attacker can replace the application's database, serving malicious or falsified data to all system users, as well as collecting user information. Permanent deletion of existing data is also possible (system integrity and availability are compromised).
Update the application to a version containing the fix introduced in commit 08d33cfd8fc47c5052b6ea29597c964a9da641e2 available in the GitHub repository. Additionally, it is recommended to restrict network access to the AnythingLLM instance only to trusted users until the patch is deployed.
Application mintplex-labs/anything-llm — versions indicated in producer references (fix commit: 08d33cfd8fc47c5052b6ea29597c964a9da641e2)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:HMintplexlabs Anythingllm
APPMintplexlabs< 1.0.0
Related vulnerabilities
XSS eskalujący do RCE w AnythingLLM Desktop poprzez podatny renderer Electron
Brak autoryzacji w AnythingLLM — destrukcyjny dostęp do VectorDB
RCE poprzez command injection w Mintplex Labs AnythingLLM
Mass assignment w anything-llm umożliwia nieautoryzowane tworzenie kont admin
Path Traversal w AnythingLLM — odczyt i usunięcie plików przez logo filename