CVE-2026-48789 | Mintplex-Labs anything-llm up to 1.12.x on Windows path.relative path traversal (GHSA-j4m9-wwcq-m868)

June 24, 2026 Yanac

A vulnerability was found in Mintplex-Labs anything-llm up to 1.12.x on Windows and classified as critical. This affects the function path.relative. Such manipulation leads to path traversal.

This vulnerability is documented as CVE-2026-48789. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More