Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-32628

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can invoke the agent to execute arbitrary SQL commands on connected databases. The getTableSchemaSql() method in all three database connectors (MySQL, PostgreSQL, MSSQL) constructs SQL queries using direct string concatenation of the table_name parameter without sanitiz
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:66659ce4930a46b121869c330b0ea6299f0b2e647d649c87b57a16d69a03539e
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"product":"anything-llm","vendor":"Mintplex-Labs","versions":[{"status":"affected","version":"<= 1.11.1"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7e5928047b2bf9b818326c3f78bb397c95b7c12906acf6b1d15cb31460b25c96 · sha256:1a132a405a17afcb… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","baseScore":7.7,"baseSeverity":"HIGH","privilegesRequired":"LOW","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:7e5928047b2bf9b818326c3f78bb397c95b7c12906acf6b1d15cb31460b25c96 · sha256:1a132a405a17afcb… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion
{"cweId":"CWE-89","description":"CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:7e5928047b2bf9b818326c3f78bb397c95b7c12906acf6b1d15cb31460b25c96 · sha256:1a132a405a17afcb… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions
{"name":"https://github.com/Mintplex-Labs/anything-llm/commit/334ce052f063b53a4275518cbed3bab357695d7e","tags":["x_refsource_MISC"],"url":"https://github.com/Mintplex-Labs/anything-llm/commit/334ce052f063b53a4275518cbed3bab357695d7e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7e5928047b2bf9b818326c3f78bb397c95b7c12906acf6b1d15cb31460b25c96 · sha256:1a132a405a17afcb… · /containers/cna/references/1
{"name":"https://github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-jwjx-mw2p-5wc7","tags":["x_refsource_CONFIRM"],"url":"https://github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-jwjx-mw2p-5wc7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7e5928047b2bf9b818326c3f78bb397c95b7c12906acf6b1d15cb31460b25c96 · sha256:1a132a405a17afcb… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer