Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
mintplex-labs/anything-llm
master @ 410d234
75
Fixes
2
CVEs
CRITICAL
Peak severity
22.5%
Coverage
Highlights
Auth Bypass: 21 prior fixes. Scrutinize any change in this area.
server/endpoints/system.js: most-fixed (15 issues). Treat as high-risk during review.
48 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Query injection vulnerabilities via Prisma and loose parameters allowed unauthenticated attackers to execute login logic bypasses or bypass administrator checks when updating environment variables or system settings. Proper type assertion and strict schemas are mandatory.
Path Traversal: Loose handling of file paths during deletion, moving, and reading enabled directory traversal. Implementations must robustly canonicalize paths and enforce strict boundary verification using prefix validation.
SQL Injection: Several endpoints were vulnerable to SQL Injection due to raw SQL query concatenation or unescaped user-controlled inputs in Workspace.get and prisma statements. Parameterization and explicit type casting must be consistently used.