High severity7.2NVD Advisory· Published Mar 2, 2024· Updated Jun 17, 2026

CVE-2024-0795

Description

If an attacked was given access to an instance with the admin or manager role there is no backend authentication that would prevent the attacked from creating a new user with an admin role and then be able to use this new account to have elevated privileges on the instance

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mintplex Labs/Anythingllm2 versions
cpe:2.3:a:mintplexlabs:anythingllm:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mintplexlabs:anythingllm:*:*:*:*:*:*:*:*range: <1.0.0
- (no CPE)
mintplex-labs/mintplex-labs/anything-llmv5
Range: unspecified

Patches

Vulnerability mechanics

References

github.com/mintplex-labs/anything-llm/commit/9a237db3d1f66cdbcf5079599258f5fb251c5564nvdPatch
huntr.com/bounties/f69e3307-7b44-4776-ac60-2990990723ecnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000