CVE-2026-88055
Received Received - Intake

Stored XSS in AnythingLLM via Unsanitized Meta Preferences

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: GitHub, Inc.

Description
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.16.1 and earlier, the manager role can store meta_page_title or meta_page_favicon through /api/admin/system-preferences, and MetaGenerator inserts those values into production homepage HTML without escaping attribute values or text content. The values pass unchanged through server/models/systemSettings.js and reach MetaGenerator.generate() in server/index.js. #assembleMeta() in server/utils/boot/MetaGenerator.js concatenates the stored values into HTML. When an administrator visits the homepage /, injected JavaScript can read the administrator JWT and use it to create API keys, access or modify workspace and chat data, delete users, and perform other administrator actions. server/endpoints/admin.js accepts the manager-controlled settings before server/models/systemSettings.js returns them unchanged. No fixed version is available as of this review.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-10
Last Modified
2026-09-10
Generated
2026-09-10
AI Q&A
2026-09-10
EPSS Evaluated
N/A
NVD
CVE-2026-88055
EUVD
EUVD-2026-75642

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mintplex_labs anything_llm to 1.16.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-88055 is a stored cross-site scripting (XSS) vulnerability in AnythingLLM versions 1.16.1 and earlier. It allows a manager role to inject malicious scripts via the meta_page_title or meta_page_favicon settings. These values are inserted into the homepage HTML without proper escaping, enabling script execution when an administrator visits the page.

Detection Guidance

To detect this vulnerability, inspect the AnythingLLM application for versions 1.16.1 or earlier. Check if the manager role can modify meta_page_title or meta_page_favicon via /api/admin/system-preferences without validation. Review server/models/systemSettings.js and server/utils/boot/MetaGenerator.js for unescaped HTML insertion in homepage generation.

Impact Analysis

An attacker with manager privileges can exploit this to inject JavaScript that reads the administrator's JWT token. This token can then be used to perform administrative actions like creating API keys, accessing or modifying workspace and chat data, and deleting users without further interaction.

Mitigation Strategies

Immediately upgrade to a patched version if available. If no patch exists, implement HTML escaping for meta_page_title and meta_page_favicon inputs in server/utils/boot/MetaGenerator.js. Restrict manager role access to system-preferences endpoint and monitor for unauthorized modifications.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-88055. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart