PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-42456 Mintplex-Labs CVE debrief

An insecure direct object reference (IDOR) vulnerability in AnythingLLM prior to version 1.12.1 allows authenticated users to access other users' private chat responses via the text-to-speech (TTS) endpoint. The GET /api/workspace/:slug/tts/:chatId route validates workspace membership but fails to verify ownership of the targeted chat row, enabling unauthorized audio retrieval of private assistant responses when a chatId is known or guessed. This vulnerability was published on May 8, 2026, and last modified on May 18, 2026. The issue has been resolved in version 1.12.1.

Vendor
Mintplex-Labs
Product
anything-llm
CVSS
MEDIUM 4.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-08
Original CVE updated
2026-05-18
Advisory published
2026-05-08
Advisory updated
2026-05-18

Who should care

Organizations deploying AnythingLLM for multi-user environments where workspace collaboration features are enabled and private chat interactions require isolation between users.

Technical summary

The vulnerability exists in the GET /api/workspace/:slug/tts/:chatId endpoint of AnythingLLM, where workspace membership validation is performed but chat row ownership is not verified. This architectural gap in authorization logic creates an IDOR condition allowing authenticated users within a shared workspace to retrieve TTS audio for any chat response by manipulating the chatId parameter. The CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N reflects network accessibility, low attack complexity, required low privileges, and confidentiality impact without integrity or availability effects.

Defensive priority

medium

Recommended defensive actions

  • Upgrade to AnythingLLM version 1.12.1 or later to remediate this vulnerability
  • Review access controls on TTS endpoints to ensure proper authorization checks for chat row ownership
  • Audit workspace-level permissions to verify that resource-level authorization is enforced beyond membership validation
  • Monitor access logs for unusual TTS endpoint requests that may indicate attempted exploitation
  • If immediate patching is not possible, consider restricting TTS functionality or implementing additional authorization middleware

Evidence notes

The vulnerability description is sourced from the official CVE record and NVD entry, with technical details confirmed through the vendor's GitHub Security Advisory (GHSA-jwqg-jfg3-x5vv). The patch commit and release notes provide definitive remediation evidence.

Official resources

public