MediumVulnerabilityLLM-specific

CVE-2025-63390: AnythingLLM authentication bypass in /api/workspaces endpoint

Source: NVD(opens in a new tab)
Identifier: CVE-2025-63390
Published: December 18, 2025
Record updated: October 9, 2026

Known exploitation: Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
EPSS: 0.6%

Summary

An authentication bypass in AnythingLLM v1.8.5 (CVE-2025-63390) lies in the /api/workspaces endpoint, which fails to implement proper authentication checks. Unauthenticated remote attackers can enumerate and retrieve detailed information on all configured workspaces, including identifiers, AI model configurations, system prompts (openAiPrompt), operational parameters, vector search settings, chat modes and timestamps.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Details

Scores and exploitation

CVSS score: 5.3(medium)
EPSS: 0.6%Estimated probability that this CVE is exploited in the next 30 days, from the FIRST Exploit Prediction Scoring System. Read on November 4, 2026.

Weaknesses and techniques

Weakness (CWE): CWE-306
Attack pattern (CAPEC): CAPEC-115

Classification

Attack type: Data extraction
Attack sophistication: Trivial
AI component targeted: API
Impact: Confidentiality
Labels: security,
privacy

How this record was produced

Summaries, mitigations and labels on this page are generated automatically from the source. The linked source is authoritative. The source gives this advisory a description and no title, so the title above is a headline generated from the source text.

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-63390

First tracked: February 15, 2026 at 08:53 PM ET, from NVD/CVE Database

Classifier: claude-haiku-5-5, prompt v4

Classifier confidence: 93% (self-assessed)

Summary

Mitigation

Related items