CVE-2026-45403— AnythingLLM: filesystem-copy-file follows nested symlinks and copies files from outside the allowed directory

AnythingLLM: filesystem-copy-file follows nested symlinks and copies files from outside the allowed directory

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, the AnythingLLM agent filesystem copy tool validates only the top-level source and destination paths. The recursive copy helper then descends into child entries using fs.stat() and copies files with fs.copyFile() without validating each child or rejecting symlinks. Because both APIs follow symlinks, a symlink nested inside an allowed source directory can point outside the allowed filesystem root and cause outside file contents to be copied into an allowed destination as a regular file. This vulnerability is fixed in 1.13.0.

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N

在文件访问前对链接解析不恰当(链接跟随)

AnythingLLM 后置链接漏洞

AnythingLLM是Mintplex开源的一个一体化AI应用程序。 AnythingLLM 1.13.0之前版本存在后置链接漏洞，该漏洞源于文件系统复制工具仅验证顶级源和目标路径，递归复制助手使用fs.stat()和fs.copyFile()复制子条目而未验证每个子条目或拒绝符号链接，允许的源目录内嵌套的符号链接可指向允许的文件系统根目录之外，导致外部文件内容被复制到允许的目标目录。

N/A

N/A