A vulnerability classified as problematic was found in Mintplex-Labs anything-llm up to 1.11.1. Affected is an unknown function of the component HTTP Endpoint. Executing a manipulation can lead to permissive cross-domain policy with untrusted domains.
The identification of this vulnerability is CVE-2026-32617. The attack may be launched remotely. There is no exploit available.
