CVE-2026-32626

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, AnythingLLM Desktop contains a Streaming Phase XSS vulnerability in the chat rendering pipeline that escalates to Remote Code Execution on the host OS due to insecure Electron configuration. This works with default settings and requires no user interaction beyond normal chat usage. The custom markdown-it image renderer in frontend/src/utils/chat/markdown.js interpolates token.content directly into the alt attribute without HTML entity escaping. The PromptReply component renders this output via dangerouslySetInnerHTML without DOMPurify sanitization — unlike HistoricalMessage which correctly applies DOMPurify.sanitize().

• CWE-79

• https://github.com/Mintplex-Labs/anything-llm/commit/9e2d144dc8be6fab29f560f5bcdaa9ef7dbb4214Patch
• https://github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-rrmw-2j6x-4mf2Exploit, Vendor Advisory

Published

Mar 16, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-32620Discourse is an open-source discussion platform. From versio…4.3
• CVE-2026-32621Apollo Federation is an architecture for declaratively compo…9.9
• CVE-2026-32622SQLBot is an intelligent data query system based on a large …8.8
• CVE-2026-32623xrdp is an open source RDP server. Versions through 0.10.5 c…8.1
• CVE-2026-32624xrdp is an open source RDP server. Versions through 0.10.5 c…6.5
• CVE-2026-32625LibreChat is an enhanced ChatGPT clone that supports multipl…9.6
• CVE-2026-32627cpp-httplib is a C++11 single-file header-only cross platfor…8.1
• CVE-2026-32628AnythingLLM is an application that turns pieces of content i…8.8
• CVE-2026-32629phpMyFAQ is an open source FAQ web application. Prior to ver…6.1
• CVE-2026-3263A vulnerability was found in go2ismail Asp.Net-Core-Inventor…8.8
• CVE-2026-32630file-type detects the file type of a file, stream, or data. …5.3
• CVE-2026-32631Git for Windows is the Windows port of Git. Versions prior t…7.4