← Vulnerability feed

Vulnerability record · CVE-2026-48116 · published 28 May 2026

CVE-2026-48116: Mintplexlabs anythingllm command injection vulnerability

Mintplexlabs · Anythingllm

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, the filesystem-search-files agent skill passes its LLM-controlled pattern parameter to ripgrep as a positional argument without a -- end-of-options separator. ripgrep parses any argument that starts with - as an option, so a pattern of --pre=/bin/sh turns ripgrep into a script executor: it runs /bin/sh <file> for every file it walks. An attacker who can chat with an agent on a deployment with the filesystem plugin enabled (the default in the official Docker image) can use this, together with the sibling filesystem-write-text-file skill, to run arbitrary commands inside the AnythingLLM server container. This vulnerability is fixed in 1.13.0.

8.8 CVSS 3.1 High EPSS 0.54% · top 57.0% CWE-77 · Command injectionCWE-88 · Argument injection
8.8CVSS 3.1 base score
0.54%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
3References, 2 tagged exploit
21 Jul 2026Last modified by NVD

Description

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, the filesystem-search-files agent skill passes its LLM-controlled pattern parameter to ripgrep as a positional argument without a -- end-of-options separator. ripgrep parses any argument that starts with - as an option, so a pattern of --pre=/bin/sh turns ripgrep into a script executor: it runs /bin/sh <file> for every file it walks. An attacker who can chat with an agent on a deployment with the filesystem plugin enabled (the default in the official Docker image) can use this, together with the sibling filesystem-write-text-file skill, to run arbitrary commands inside the AnythingLLM server container. This vulnerability is fixed in 1.13.0.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/Mintplex-Labs/anything-llm/commit/94ed62d320df1a06c229e4bc3ee09c2cb5111b33 Patch
https://github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-6hrp-7mw6-8v59 ExploitMitigationVendor Advisory
https://github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-6hrp-7mw6-8v59 ExploitMitigationVendor Advisory

Track CVE-2026-48116 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.9CVE-2024-3025Mintplexlabs anythingllm relative path traversal vulnerabilitymintplex-labs/anything-llm is vulnerable to path traversal attacks due to insufficient validation of user-supplied input in the logo filename functio…EPSS 1.0%9.8CVE-2024-3104Mintplexlabs anythingllm os command injection vulnerabilityA remote code execution vulnerability exists in mintplex-labs/anything-llm due to improper handling of environment variables. Attackers can exploit t…EPSS 0.98%9.8CVE-2023-4897Mintplexlabs anythingllm relative path traversal vulnerabilityRelative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1.EPSS 0.90%9.6CVE-2026-32626Mintplexlabs anythingllm cross-site scripting vulnerabilityAnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, An…EPSS 0.73%9.4CVE-2024-3033Mintplexlabs anythingllm incorrect authorization vulnerabilityAn improper authorization vulnerability exists in the mintplex-labs/anything-llm application, specifically within the '/api/v/' endpoint and its sub-…EPSS 0.55%9.1CVE-2024-3279Mintplexlabs anythingllm missing authentication for critical function vulnerabilityAn improper access control vulnerability exists in the mintplex-labs/anything-llm application, specifically within the import endpoint. This vulnerab…EPSS 0.65%9.1CVE-2024-0404Mintplexlabs anythingllm mass assignment vulnerabilityA mass assignment vulnerability exists in the `/api/invite/:code` endpoint of the mintplex-labs/anything-llm repository, allowing unauthorized creati…EPSS 0.78%9.1CVE-2023-5832Mintplexlabs anythingllm improper input validation vulnerabilityImproper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0.EPSS 0.74%

Source: NIST National Vulnerability Database (record CVE-2026-48116), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.