PT-2026-44545 · Unknown · Anything-Llm
CVSS v3.1
2.5
Low
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
AnythingLLM versions prior to 1.13.0
Description
The agent filesystem copy tool validates only the top-level source and destination paths. The recursive copy helper uses
fs.stat() to descend into child entries and fs.copyFile() to copy files without validating each child or rejecting symlinks. Since both APIs follow symlinks, a symlink nested within an allowed source directory can point outside the allowed filesystem root, allowing files from outside the root to be copied into an allowed destination as regular files.Recommendations
Update to version 1.13.0.
Exploit
Fix
Link Following
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Anything-Llm