{"data":{"id":"97f4a9f2-11a9-4367-a28f-c5c45daf7d04","title":"CVE-2026-41318: AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during…","summary":"AnythingLLM versions prior to 1.12.1 contain a stored DOM-level XSS flaw, tracked as CVE-2026-41318. The in-chat markdown renderer interpolates image `alt` text into an HTML attribute without encoding, and the `Chartable` component renders chart captions with no DOMPurify sanitization. An attacker who can influence LLM output, through indirect prompt injection in a shared workspace document or by creating a chart record in a multi-user workspace, can run script in other users' browsers when they open that conversation.","solution":"Patched in version 1.12.1.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-41318","publishedAt":"2026-04-24T04:16:20.193Z","cveId":"CVE-2026-41318","cweIds":["CWE-79","CWE-116","CWE-1336"],"cvssScore":"5.4","cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["AnythingLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"AnythingLLM stored XSS through chart captions in chat history","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N","attackVector":"network","attackComplexity":"high","privilegesRequired":"low","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00195,"epssCheckedAt":"2026-11-09T18:09:53.195Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T12:11:06.147Z","patchAvailable":null,"disclosureDate":"2026-04-24T04:16:20.193Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-198","CAPEC-86"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}