CVE-2026-72917 Mintplex-Labs CVE debrief

Who should care

Defenders responsible for AnythingLLM instances, especially in multi-user environments, should assess exposure and prioritize remediation. This includes reviewing the current deployment of AnythingLLM, identifying potential vulnerabilities, and taking steps to secure the account-recovery flow.

Why it matters

CVE-2026-72917 is a vulnerability in AnythingLLM's unauthenticated account-recovery flow that allows an attacker to take over a user account, including an administrator account. Defenders should prioritize verifying and remediating this vulnerability in AnythingLLM instances, especially in multi-user environments.

• An attacker can take over a user account, including an administrator account, without authentication.
• The vulnerability allows for unauthorized access to sensitive information and systems.
• Defenders must verify and remediate this vulnerability to prevent exploitation.
• The exploitation of this vulnerability can lead to lateral movement and further attacks within the network.

Technical summary

The vulnerability exists in the account-recovery flow of AnythingLLM versions 1.0.0 to 1.15.0. An attacker can exploit this by submitting a valid recovery code with different surrounding whitespace to receive a password-reset token and take over the account. The account-recovery flow in server/utils/PasswordRecovery/index.js uses recoverAccount() to deduplicate the raw recoveryCodes values before trimming them, allowing one valid code submitted twice with different surrounding whitespace to satisfy the two-code check.

Defensive priority

Defenders should prioritize verifying and remediating this vulnerability in AnythingLLM instances, especially in multi-user environments.

Recommended defensive actions

• Verify and remediate AnythingLLM instances to ensure the account-recovery flow is secure.
• Restrict access to the account-recovery feature to authenticated users.
• Monitor for suspicious activity related to account-recovery attempts.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The vulnerability exists in the account-recovery flow of AnythingLLM versions 1.0.0 to 1.15.0. An attacker can exploit this by submitting a valid recovery code with different surrounding whitespace to receive a password-reset token and take over the account.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.