What’s Vulnerable › Vulnerabilities
CVE-2026-24477: AnythingLLM has key leak in `systemSettings.js`
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.1% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2026-01-27 · updated 2026-06-17
- Weakness: CWE-201
Description
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. If AnythingLLM prior to version 1.10.0 is configured to use Qdrant as the vector database with an API key, this QdrantApiKey could be exposed in plain text to unauthenticated users via the `/api/setup-complete` endpoint. Leakage of QdrantApiKey allows an unauthenticated attacker full read/write access to the Qdrant vector database instance used by AnythingLLM. Since Qdrant often stores the core knowledge base for RAG in AnythingLLM, this can lead to complete compromise of the semantic search / retrieval functionality and indirect leakage of confidential uploaded documents. Version 1.10.0 patches the issue.
Affected products
- Mintplexlabs Anythingllm: before 1.10.0 — fixed in 1.10.0
How to fix
Upgrade to a fixed version: Mintplexlabs Anythingllm 1.10.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-24477 or the next vulnerability affects your stack