Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Anytype Heart is the middleware library for Anytype. The challenge-based authentication for the local gRPC client API can be bypassed, allowing an attacker to gain access without the 4-digit code. This vulnerability is fixed in anytype-heart 0.48.4, anytype-cli 0.1.11, and Anytype Desktop 0.54.5.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-31863 Anytype Heart is the middleware library for Anytype. The challenge-based authentication for the local gRPC client API can be bypassed, allowing an attacker to gain ac… https://www.cve.org/CVERecord?id=CVE-2026-31863
Post summary
The CVE record describes a challenge‑based authentication bypass in Anytype Heart’s local gRPC client API, enabling attackers to gain access, but no PoC, exploit, or patch information is included.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | anytype | anytype_cli | - | - | - |
| App | anytype | anytype_desktop | - | - | - |
| App | anytype | anytype_heart | - | - | - |