2026-03-14 · 2 min · BitNinja Team

Critical SQL Injection Threat in AnythingLLM

The recent discovery of a critical SQL injection vulnerability in AnythingLLM raises significant concerns for server administrators and hosting providers. The flaw, identified as CVE-2026-32628, allows unauthorized users to execute arbitrary SQL commands through the built-in S...