CVE-2024-8196

CVE-2024-8196 is a critical vulnerability affecting the Windows desktop version of mintplex-labs/anything-llm v1.5.11, where the application inadvertently exposes server port 3001 without authentication. This allows an unauthenticated attacker to gain full backend access, leading to severe impacts including complete data deletion. With a CVSS score of 9.8 (CRITICAL), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction required. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the potential for catastrophic data loss makes this a high-priority concern.