Vulnerabilities in mintplex-labs

77 results
Vexday analysis

Com 57 CVEs catalogadas, o portfólio de vulnerabilidades da Mintplex Labs concentra 15 falhas de severidade crítica, o que representa parcela expressiva do total e merece atenção prioritária em programas de gestão de risco. A taxa de exploração ativa está abaixo da média geral do catálogo KEV, e nenhuma PoC pública foi identificada até o momento, o que reduz temporariamente a superfície de ataque imediata, mas não elimina o risco. A falha mais recorrente é CWE-918 (Server-Side Request Forgery), padrão que frequentemente permite a um atacante abusar do servidor para acessar recursos internos não expostos diretamente. A CVE mais perigosa em acompanhamento é CVE-2024-6842, com score EPSS de 0,2919 — valor que indica probabilidade de exploração não negligenciável e justifica priorização nas rotinas de patching.

CVE-2024-5208MEDIUMUncontrolled Resource Consumption in mintplex-labs/anything-llmEPSS 0.6%CVE-2024-4287HIGHImproper Input Validation in mintplex-labs/anything-llmEPSS 0.6%CVE-2024-5216HIGHDenial of Service in mintplex-labs/anything-llmEPSS 0.6%CVE-2024-0765CRITICALDefault user role exporting save state of instanceEPSS 0.6%CVE-2024-0798HIGHPrivilege Escalation in mintplex-labs/anything-llmEPSS 0.6%CVE-2024-3152HIGHPrivilege Escalation and Local File Inclusion in mintplex-labs/anything-llmEPSS 0.6%CVE-2024-0551HIGHDownload and export of file via default user roleEPSS 0.6%CVE-2024-4284MEDIUMDenial of Service in mintplex-labs/anything-llmEPSS 0.6%CVE-2024-3033CRITICALImproper Authorization in mintplex-labs/anything-llmEPSS 0.6%CVE-2026-48116HIGHAnythingLLM: RCE via ripgrep --pre argument injection in filesystem-search-files agent skillEPSS 0.5%CVE-2026-32719MEDIUMAnythingLLM has a Zip Slip Path Traversal and Code Execution via Community Hub Plugin ImportEPSS 0.5%CVE-2024-3149CRITICALSSRF in mintplex-labs/anything-llmEPSS 0.5%CVE-2024-10109HIGHIncorrect Authorization in mintplex-labs/anything-llmEPSS 0.5%CVE-2024-4084HIGHSSRF vulnerability in mintplex-labs/anything-llmEPSS 0.5%CVE-2024-8251MEDIUMPrisma Injection in mintplex-labs/anything-llmEPSS 0.5%CVE-2024-13060MEDIUMImproper Authorization in mintplex-labs/anything-llmEPSS 0.5%CVE-2024-0436HIGHPrevent timing attack for single-user password checkEPSS 0.5%CVE-2024-0435HIGHUser can submit message to self-XSSEPSS 0.5%CVE-2024-5213MEDIUMExposure of Sensitive Information in mintplex-labs/anything-llmEPSS 0.5%CVE-2024-3102MEDIUMJSON Injection in mintplex-labs/anything-llmEPSS 0.5%