The vulnerability arises from improper input handling in the loadFlow and deleteFlow methods within server/utils/agentFlows/index.js of mintplex-labs/anything-llm versions up to 1.9.1. The combination of path.join and normalizePath functions fails to prevent directory traversal sequences such as '\..\filename', enabling attackers to access or delete arbitrary .json files outside the intended directory. This can expose sensitive data or disrupt service by removing critical files. The issue is resolved in version 1.12.1.

Successful exploitation can lead to high impact outcomes including confidentiality breaches by exposing sensitive configuration files (e.g., containing API keys), integrity loss by unauthorized deletion of files, and availability disruption through deletion of critical files like package.json. The CVSS score of 9.1 reflects the critical severity with network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported.

Upgrade affected installations of mintplex-labs/anything-llm to version 1.12.1 or later where the vulnerability is fixed. Since no official patch link or advisory is provided, verify the upgrade from the vendor's official source. Patch status is not yet confirmed by vendor advisory; check vendor communications for the latest remediation guidance. Until patched, restrict access to the affected component to trusted users only, as the vulnerability requires high privileges to exploit.