Understanding the AnythingLLM Path Traversal Vulnerability
A significant security flaw has been found in AnythingLLM, a helpful application that transforms your content into a usable knowledge base for Large Language Models (LLMs). This vulnerability, known as Path Traversal, could allow attackers to gain control over your server. It specifically affects the application’s DrupalWiki integration.
In simple terms, a Path Traversal vulnerability lets an attacker trick a program into accessing files or directories outside its intended location. Imagine a file cabinet where you can only access folders within a specific drawer. A path traversal attack is like finding a way to reach other drawers, or even entirely different cabinets, using special instructions.
For AnythingLLM, this flaw means a bad actor could write unwanted files to nearly any part of your server. This is particularly dangerous because it can lead to something called Remote Code Execution (RCE), where an attacker can run their own commands on your system. This could happen by overwriting important configuration files or by placing malicious scripts where they can be executed.
CVE Details
- Product: AnythingLLM
- Published: January 27, 2026
- Severity: High (CVSS: 7.2)
- Status: Analyzed
Affected Products
This critical Path Traversal vulnerability impacts all versions of AnythingLLM prior to version 1.10.0. If you are running an older version, your system is at risk.
Current Status
The vulnerability has been thoroughly analyzed and confirmed. Fortunately, a fix is available. The issue stems from improper handling of file names within AnythingLLM’s DrupalWiki integration. The application directly used file names provided by an external API response without checking for or removing dangerous characters like “../“. This oversight allowed attackers to manipulate file paths, enabling them to write files outside the designated directory.
Severity Level
This vulnerability is rated as High severity with a CVSS score of 7.2. The primary concern is its potential to enable Remote Code Execution (RCE). An attacker could leverage this flaw to:
- Overwrite critical system files, leading to a complete denial of service.
- Inject malicious scripts or alter configuration files, allowing them to execute arbitrary code on the server.
The attack requires high privileges, meaning an attacker would need to be an administrator or convince an administrator to configure a malicious DrupalWiki URL. However, once exploited, the impact on confidentiality, integrity, and availability is high, making this a serious threat.
Possible Solutions
The most important step to protect your AnythingLLM instance is to update to version 1.10.0 or later immediately. This version includes the necessary patches to fix the Path Traversal vulnerability in the DrupalWiki integration.
If an immediate update is not feasible, consider disabling the DrupalWiki integration until you can apply the patch. Always follow security best practices, including:
- Regularly backing up your data.
- Monitoring your application logs for unusual activity.
- Ensuring that file system permissions are set to the least privilege necessary.
References
https://github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-jp2f-99h9-7vjv
