A vulnerability marked as problematic has been reported in mintplex-labs anything-llm. The affected element is an unknown function of the component Password Recovery Endpoint. The manipulation leads to information exposure through discrepancy.

This vulnerability is referenced as CVE-2026-21484. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to apply a patch to fix this issue.