CVE-2024-3150

In mintplex-labs/anything-llm, a vulnerability exists in the thread update process that allows users with Default or Manager roles to escalate their privileges to Administrator. The issue arises from improper input validation when handling HTTP POST requests to the endpoint `/workspace/:slug/thread/:threadSlug/update`. Specifically, the application fails to validate or check user input before passing it to the `workspace_thread` Prisma model for execution. This oversight allows attackers to craft a Prisma relation query operation that manipulates the `users` model to change a user's role to admin. Successful exploitation grants attackers the highest level of user privileges, enabling them to see and perform all actions within the system.

• CWE-755
• CWE-755

• https://github.com/mintplex-labs/anything-llm/commit/200bd7f0615347ed2efc07903d510e5a208b0afcPatch
• https://huntr.com/bounties/745f5c80-14ea-4055-9f15-a066ae93e5a3Exploit, Third Party Advisory
• https://github.com/mintplex-labs/anything-llm/commit/200bd7f0615347ed2efc07903d510e5a208b0afcPatch
• https://huntr.com/bounties/745f5c80-14ea-4055-9f15-a066ae93e5a3Exploit, Third Party Advisory

Published

Jun 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-31492An external control of file name or path vulnerability [CWE-…7.8
• CVE-2024-31493An improper removal of sensitive information before storage …6.5
• CVE-2024-31495A improper neutralization of special elements used in an sql…2.7
• CVE-2024-31496A stack-based buffer overflow vulnerability [CWE-121] in For…6.7
• CVE-2024-31497In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce g…5.9
• CVE-2024-31498Yubico ykman-gui (aka YubiKey Manager GUI) before 1.2.6 on W…8.8
• CVE-2024-31502An issue in Insurance Management System v.1.0.0 and before a…8.1
• CVE-2024-31503Incorrect access control in Dolibarr ERP CRM versions 19.0.0…7.5
• CVE-2024-31504Buffer Overflow vulnerability in SILA Embedded Solutions Gmb…7.5
• CVE-2024-31506Sourcecodester Online Graduate Tracer System v1.0 is vulnera…7.5
• CVE-2024-31507Sourcecodester Online Graduate Tracer System v1.0 is vulnera…8.6
• CVE-2024-3151A vulnerability, which was classified as problematic, was fo…4.3