CVE-2026-55611: CWE-639: Authorization Bypass Through User-Controlled Key in Mintplex-Labs anything-llm
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. From 1.11.1 until 1.14.1, userId/workspaceId scoping to the parsed-files read/delete paths was added. However, the POST /api/workspace/:slug/embed-parsed-file/:fileId flow still deletes the target file by primary key only, with no ownership check, inside two finally{} blocks that run even when the ownership-checked read fails. As a result a manager or admin (multi-user mode) can delete any other user's parsed file in any workspace — including workspaces they are not a member of — by enumerating integer fileIds. The server even returns "File not found" while still deleting the file. This vulnerability is fixed in 1.14.1.
AI Analysis
Technical Summary
In AnythingLLM versions 1.11.1 through 1.14.0, the POST /api/workspace/:slug/embed-parsed-file/:fileId endpoint deletes parsed files by primary key without verifying file ownership. Although userId/workspaceId scoping was added for read and delete paths, this endpoint's deletion logic runs inside finally blocks that execute regardless of ownership check results. Consequently, users with manager or admin privileges can delete any parsed file by enumerating integer fileIds, including files in workspaces they are not members of. The server responds with "File not found" even when the file is deleted, masking the unauthorized deletion. This issue is resolved in version 1.14.1.
Potential Impact
Managers or admins in multi-user mode can delete any parsed file belonging to any user in any workspace, including those they are not authorized to access. This unauthorized deletion can lead to data loss and potential disruption of workflows relying on those files. There is no impact on confidentiality or integrity beyond deletion, and no denial of service or code execution is indicated.
Mitigation Recommendations
A fix is available in AnythingLLM version 1.14.1. Users should upgrade to version 1.14.1 or later to resolve this authorization bypass vulnerability. Until upgrading, restrict manager and admin privileges to trusted users only to minimize risk. Patch status is not explicitly stated beyond the fix in 1.14.1, so verify with the vendor advisory for the latest remediation guidance.
CVE-2026-55611: CWE-639: Authorization Bypass Through User-Controlled Key in Mintplex-Labs anything-llm
Description
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. From 1.11.1 until 1.14.1, userId/workspaceId scoping to the parsed-files read/delete paths was added. However, the POST /api/workspace/:slug/embed-parsed-file/:fileId flow still deletes the target file by primary key only, with no ownership check, inside two finally{} blocks that run even when the ownership-checked read fails. As a result a manager or admin (multi-user mode) can delete any other user's parsed file in any workspace — including workspaces they are not a member of — by enumerating integer fileIds. The server even returns "File not found" while still deleting the file. This vulnerability is fixed in 1.14.1.
CVSS v3.1
Score 0.0none
Affected software
pkg:github/mintplex-labs/anything-llmRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
In AnythingLLM versions 1.11.1 through 1.14.0, the POST /api/workspace/:slug/embed-parsed-file/:fileId endpoint deletes parsed files by primary key without verifying file ownership. Although userId/workspaceId scoping was added for read and delete paths, this endpoint's deletion logic runs inside finally blocks that execute regardless of ownership check results. Consequently, users with manager or admin privileges can delete any parsed file by enumerating integer fileIds, including files in workspaces they are not members of. The server responds with "File not found" even when the file is deleted, masking the unauthorized deletion. This issue is resolved in version 1.14.1.
Potential Impact
Managers or admins in multi-user mode can delete any parsed file belonging to any user in any workspace, including those they are not authorized to access. This unauthorized deletion can lead to data loss and potential disruption of workflows relying on those files. There is no impact on confidentiality or integrity beyond deletion, and no denial of service or code execution is indicated.
Mitigation Recommendations
A fix is available in AnythingLLM version 1.14.1. Users should upgrade to version 1.14.1 or later to resolve this authorization bypass vulnerability. Until upgrading, restrict manager and admin privileges to trusted users only to minimize risk. Patch status is not explicitly stated beyond the fix in 1.14.1, so verify with the vendor advisory for the latest remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-06-16T23:31:22.445Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a3ee87327e9c79719ee540b
Added to database: 06/26/2026, 21:00:35 UTC
Last enriched: 06/26/2026, 21:01:15 UTC
Last updated: 08/10/2026, 04:59:11 UTC
Views: 104
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.