https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T22:43:55.041450+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-46007 cnvd-2024-46007 2026-10-15T22:43:55.089494+00:00 cnvd-2024-46007 https://cve.radiocsirt.org/vuln/euvd-2026-255007 EUVD-2026-255007 2026-10-15T22:43:55.089529+00:00 EUVD-2026-255007 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6842 fkie_cve-2024-6842 2026-10-15T22:43:55.089543+00:00

In version 1.5.5 of mintplex-labs/anything-llm, the `/setup-complete` API endpoint allows unauthorized users to access sensitive system settings. The data returned by the `currentSettings` function includes sensitive information such as API keys for search engines, which can be exploited by attackers to steal these keys and cause loss of user assets.

 https://cve.radiocsirt.org/vuln/ghsa-p868-p9pj-fvmr GHSA-p868-p9pj-fvmr 2026-10-15T22:43:55.089572+00:00

In version 1.5.5 of mintplex-labs/anything-llm, the `/setup-complete` API endpoint allows unauthorized users to access sensitive system settings. The data returned by the `currentSettings` function includes sensitive information such as API keys for search engines, which can be exploited by attackers to steal these keys and cause loss of user assets.