Mintplex Anything-LLM Prisma Injection Vulnerability

A Prisma injection vulnerability has been identified in Mintplex Labs Anything-LLM versions prior to 1.2.2. The issue arises in the API endpoint '/embed/:embedId/stream-chat', where user-supplied JSON is directly incorporated into Prisma's 'where' clause. This vulnerability allows an attacker to send a specially crafted JSON object, such as one that manipulates session ID values, to retrieve all data from the associated table. Consequently, this could result in unauthorized access to user queries in embedded chat mode.

Impact

Exploitation of this vulnerability could lead to unauthorized access to all user queries in embedded chat mode.

Reproduction

To reproduce this vulnerability, send a request to the '/embed/:embedId/stream-chat' endpoint with a crafted JSON object that includes a manipulated 'sessionId' value. This will cause Prisma to return all data from the table, exploiting the injection vulnerability.

Remediation

Users are advised to update to Mintplex Labs Anything-LLM version 1.2.2 or later, where this vulnerability has been addressed.