CVE-2025-63390

An authentication bypass vulnerability exists in AnythingLLM v1.8.5 in via the /api/workspaces endpoint. The endpoint fails to implement proper authentication checks, allowing unauthenticated remote attackers to enumerate and retrieve detailed information about all configured workspaces. Exposed data includes: workspace identifiers (id, name, slug), AI model configurations (chatProvider, chatModel, agentProvider), system prompts (openAiPrompt), operational parameters (temperature, history length, similarity thresholds), vector search settings, chat modes, and timestamps.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://gist.github.com/Cristliu/0897bceac5fdc2d945304b5087a84f14
https://gist.github.com/Cristliu/ba529c99abec87102e5ef36435d02a6d	Third Party Advisory
https://github.com/Mintplex-Labs/anything-llm/issues	Issue Tracking

Configurations

Configuration 1 (hide)

cpe:2.3:a:mintplexlabs:anythingllm:1.8.5:*:*:*:*:*:*:*

History

13 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) Existe una vulnerabilidad de omisión de autenticación en AnythingLLM v1.8.5 a través del endpoint /api/workspaces. El endpoint no implementa las comprobaciones de autenticación adecuadas, permitiendo a atacantes remotos no autenticados enumerar y recuperar información detallada sobre todos los espacios de trabajo configurados. Los datos expuestos incluyen: identificadores de espacio de trabajo (id, nombre, slug), configuraciones de modelo de IA (chatProvider, chatModel, agentProvider), prompts del sistema (openAiPrompt), parámetros operativos (temperatura, longitud del historial, umbrales de similitud), configuraciones de búsqueda vectorial, modos de chat y marcas de tiempo.

Information

Published : 2025-12-18 16:15

Updated : 2026-10-13 11:10

NVD link : CVE-2025-63390

Mitre link : CVE-2025-63390

CVE.ORG link : CVE-2025-63390

JSON object : View

Products Affected

mintplexlabs

anythingllm

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2025-63390", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-63390", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-19T21:26:50.173392Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-12-18T16:15:54.867", "references": [{"url": "https://gist.github.com/Cristliu/0897bceac5fdc2d945304b5087a84f14", "source": "cve@mitre.org"}, {"url": "https://gist.github.com/Cristliu/ba529c99abec87102e5ef36435d02a6d", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/Mintplex-Labs/anything-llm/issues", "tags": ["Issue Tracking"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "An authentication bypass vulnerability exists in AnythingLLM v1.8.5 in via the /api/workspaces endpoint. The endpoint fails to implement proper authentication checks, allowing unauthenticated remote attackers to enumerate and retrieve detailed information about all configured workspaces. Exposed data includes: workspace identifiers (id, name, slug), AI model configurations (chatProvider, chatModel, agentProvider), system prompts (openAiPrompt), operational parameters (temperature, history length, similarity thresholds), vector search settings, chat modes, and timestamps."}, {"lang": "es", "value": "Existe una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n en AnythingLLM v1.8.5 a trav\u00e9s del endpoint /api/workspaces. El endpoint no implementa las comprobaciones de autenticaci\u00f3n adecuadas, permitiendo a atacantes remotos no autenticados enumerar y recuperar informaci\u00f3n detallada sobre todos los espacios de trabajo configurados. Los datos expuestos incluyen: identificadores de espacio de trabajo (id, nombre, slug), configuraciones de modelo de IA (chatProvider, chatModel, agentProvider), prompts del sistema (openAiPrompt), par\u00e1metros operativos (temperatura, longitud del historial, umbrales de similitud), configuraciones de b\u00fasqueda vectorial, modos de chat y marcas de tiempo."}], "lastModified": "2026-10-13T11:10:00.203", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mintplexlabs:anythingllm:1.8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8077D16C-0587-4C1D-AA91-AF94E14631A2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}