CVE-2026-24477
Published: April 11, 2026
Official Description
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. If AnythingLLM prior to version 1.10.0 is configured to use Qdrant as the vector database with an API key, this QdrantApiKey could be exposed in plain text to unauthenticated users via the `/api/setup-complete` endpoint. Leakage of QdrantApiKey allows an unauthenticated attacker full read/write access to the Qdrant vector database instance used by AnythingLLM. Since Qdrant often stores the core knowledge base for RAG in AnythingLLM, this can lead to complete compromise of the semantic search / retrieval functionality and indirect leakage of confidential uploaded documents. Version 1.10.0 patches the issue.
Risk Analysis
AnythingLLM versions prior to 1.10.0 can expose the Qdrant API key in plain text to unauthenticated users if configured to use Qdrant as the vector database. This leakage grants full read/write access to the Qdrant instance, potentially compromising the knowledge base and confidential documents. The confirmed exploitation in the wild makes this an urgent issue.
This vulnerability is actively being exploited in the wild. The Qdrant API key can be exposed to unauthenticated users via the /api/setup-complete endpoint, leading to remote compromise.
Upgrade AnythingLLM to version 1.10.0 to patch this issue. Review and secure configurations related to API key storage and access.
Technical Analysis
CVE-2026-24477 requires local access, meaning attackers must already have a foothold on the target system.
Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.
CISA has added CVE-2026-24477 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.
Exploit & PoC Resources
Quick Facts
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2026-24477 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts
- !CISA KEV: Federal agencies must patch per BOD 22-01 timeline
- !Active exploitation confirmed — treat as P1