Unknown · Anything-Llm · CVE-2026-45403
**Name of the Vulnerable Software and Affected Versions**
AnythingLLM versions prior to 1.13.0
**Description**
The agent filesystem copy tool validates only the top-level source and destination paths. The recursive copy helper uses `fs.stat()` to descend into child entries and `fs.copyFile()` to copy files without validating each child or rejecting symlinks. Since both APIs follow symlinks, a symlink nested within an allowed source directory can point outside the allowed filesystem root, allowing files from outside the root to be copied into an allowed destination as regular files.
**Recommendations**
Update to version 1.13.0.