Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, GET /api/workspace/:slug/tts/:chatId in AnythingLLM returns the text-to-speech audio for another user's chat response within the same workspace because the route validates workspace membership but does not enforce ownership of the targeted chat row. As a result, an authenticated user can access another user's private assistant response in audio form if the chatId is known or guessed. This constitutes an insecure direct object reference (IDOR) affecting private chat response content exposed through the TTS endpoint. This issue has been patched in version 1.12.1.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-42456 AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, GET /api/workspac… https://www.cve.org/CVERecord?id=CVE-2026-42456
Post summary
The snippet mentions CVE‑2026‑42456 in relation to AnythingLLM, noting an issue before version 1.12.1, but it provides no substantive details on exploitation, patch, or technical characteristics.
CVE-2026-42456 Insecure Direct Object Reference in AnythingLLM Text-to-Speech Endpoint Prior to 1.12.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42456
Post summary
This snippet announces a disclosed vulnerability (IDR) in AnythingLLM Text-to-Speech endpoint versions before 1.12.1, without providing a PoC, exploit code, or mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mintplexlabs | anythingllm | - | - | - |