A vulnerability labeled as problematic has been found in Mintplex-Labs anything-llm up to 1.12.0. This issue affects some unknown processing of the file /api/workspace/. Such manipulation leads to cross site scripting.
This vulnerability is traded as CVE-2026-41318. The attack may be launched remotely. There is no exploit available.
The affected component should be upgraded.
