CyberRota Analysis
AI-GeneratedThe vulnerability affects the AnythingLLM application, specifically versions 1.16.1 and earlier, where the manager role can store unescaped meta tags that are directly injected into the production homepage HTML. This flaw allows an attacker to execute injected JavaScript, potentially compromising the administrator's JWT and enabling unauthorized access to sensitive actions such as creating API keys or modifying user data. Organizations utilizing AnythingLLM should prioritize addressing this vulnerability to safeguard their administrative functionalities and data integrity.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.16.1 and earlier, the manager role can store meta_page_title or meta_page_favicon through /api/admin/system-preferences, and MetaGenerator inserts those values into production homepage HTML without escaping attribute values or text content. The values pass unchanged through server/models/systemSettings.js and reach MetaGenerator.generate() in server/index.js. #assembleMeta() in server/utils/boot/MetaGenerator.js concatenates the stored values into HTML. When an administrator visits the homepage /, injected JavaScript can read the administrator JWT and use it to create API keys, access or modify workspace and chat data, delete users, and perform other administrator actions. server/endpoints/admin.js accepts the manager-controlled settings before server/models/systemSettings.js returns them unchanged. No fixed version is available as of this review.