Executive Summary

CVE-2026-5627 is a path traversal vulnerability in the mintplex-labs/anything-llm software, specifically in versions up to and including 1.9.1 within the AgentFlows component. The issue arises from improper handling of user input in the loadFlow and deleteFlow methods, where the combination of path.join and normalizePath allows attackers to bypass directory restrictions.

This vulnerability enables attackers to access or delete arbitrary .json files on the server, which should normally be restricted. This can lead to unauthorized information disclosure or denial of service.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can have serious impacts including information disclosure and denial of service. Attackers can exploit it to leak sensitive configuration files that may contain API keys or other confidential data.

Additionally, attackers can delete critical files such as package.json, potentially causing the application to malfunction or become unavailable.

Because the vulnerability allows arbitrary file access and deletion, it poses a high risk to the confidentiality, integrity, and availability of the affected system.

Useful 0 Not Useful 0

Detection Guidance

Detection of this vulnerability involves checking if the affected software version is up to and including 1.9.1 and if the `AgentFlows` component improperly handles file paths allowing path traversal.

One approach is to verify if unauthorized access or deletion of `.json` files outside the intended directory occurs, especially files like `package.json` or configuration files containing API keys.

Since the vulnerability is related to path traversal in the `loadFlow` and `deleteFlow` methods, monitoring file system access logs for unusual access patterns or deletions of `.json` files outside the flows directory can help.

Specific commands are not provided in the available resources or context.

Useful 0 Not Useful 0

Mitigation Strategies

The immediate mitigation step is to upgrade the mintplex-labs/anything-llm software to version 1.12.1 or later, where the vulnerability is fixed.

The fix involves enhanced path validation that restricts file operations to within the designated flows directory, preventing path traversal attacks.

If upgrading immediately is not possible, restrict access to the `AgentFlows` component and ensure only trusted admin users can perform flow-plugin operations.

Additionally, monitor and audit file system operations related to `.json` files to detect any unauthorized access or deletion attempts.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows attackers to access or delete arbitrary JSON files on the server, potentially leading to information disclosure of sensitive configuration files containing API keys and denial of service by deleting critical files.

Such unauthorized access and potential data leakage could impact compliance with standards and regulations like GDPR and HIPAA, which require protection of sensitive data and ensuring system availability.

By exposing sensitive configuration data or causing denial of service, the vulnerability could lead to violations of data protection and security requirements mandated by these regulations.

Useful 0 Not Useful 0