VYPR
← All advisories
High severity7.2NVD Advisory· Published Mar 20, 2025· Updated Jun 17, 2026

CVE-2024-8248

CVE-2024-8248

Description

A vulnerability in the normalizePath function in mintplex-labs/anything-llm version git 296f041 allows for path traversal, leading to arbitrary file read and write in the storage directory. This can result in privilege escalation from manager to admin. The issue is fixed in version 1.2.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Mintplex Labs/Anythingllm2 versions
    cpe:2.3:a:mintplexlabs:anythingllm:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mintplexlabs:anythingllm:*:*:*:*:*:*:*:*range: <1.2.2
    • (no CPE)range: git 296f041
  • mintplex-labs/mintplex-labs/anything-llmv5
    Range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.