HighVulnerability
CVE-2026-24477: AnythingLLM exposes Qdrant API key via /api/setup-complete endpoint
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-24477
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 2.1%
Summary
AnythingLLM versions before 1.10.0, when configured to use Qdrant as the vector database with an API key, expose the QdrantApiKey in plain text to unauthenticated users through the /api/setup-complete endpoint. An unauthenticated attacker who obtains the key gains full read/write access to the Qdrant instance, which can compromise retrieval functionality and leak confidential uploaded documents.
Mitigation
Fixed in 1.10.0.
Related items
- MediumCVE-2026-121938: langchain4j-aideepin before 3.31.0 contains an insecure direct object reference vulnerability that allows authenticated…Similar attack · NVD/CVE Database
- MediumGoogle: LLMjacking attacks rack up $1 million in cloud AI chargesSimilar attack · BleepingComputer
- InfoResidual Attribute Leakage Is an Interface: Auditing Privacy Evaluation After Text De-identificationSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- LowExtracting System Prompt of LLM Services in Complex (Agentic) Settings: Hierarchical Optimization and Reliable Evaluation MetricsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- InfoMCP Tool Poisoning in Agentic AI Frameworks: A Cross-Framework Measurement StudySimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)