Mintplex-Labs/anything-llm
1
0
Fork 0
mirror of https://github.com/Mintplex-Labs/anything-llm.git synced 2026-07-19 14:13:35 -04:00
Code Issues 328 Packages Projects Releases 10 Wiki Activity

[GH-ISSUE #5217] [Security] Docker privileged mode in CloudFormation + exec() in agent handler #4972

New Issue
Closed
opened 2026-06-05 14:51:13 -04:00 by yindo · 1 comment
yindo commented 2026-06-05 14:51:13 -04:00
Owner
Copy Link
Copy Source

Originally created by @hhhashexe on GitHub (Mar 15, 2026).
Original GitHub issue: https://github.com/Mintplex-Labs/anything-llm/issues/5217

Found via SkillFence automated scan.

Finding 1: cloudformation_create_anythingllm.json — Docker container runs in privileged mode, giving full host access.

Finding 2: index.js — exec() shell command execution in agent handler — potential command injection if user input reaches this code path.

Recommendation:

  • Remove --privileged flag from Docker configuration
  • Use parameterized commands instead of exec()
  • Add input validation before shell execution

Scan: npx skillfence scan . (Verdict: BLOCK, 26 critical, 33 high)

Responsible disclosure via automated security scanning.

Originally created by @hhhashexe on GitHub (Mar 15, 2026). Original GitHub issue: https://github.com/Mintplex-Labs/anything-llm/issues/5217 Found via [SkillFence](https://npmjs.com/package/skillfence) automated scan. **Finding 1:** `cloudformation_create_anythingllm.json` — Docker container runs in privileged mode, giving full host access. **Finding 2:** `index.js` — `exec()` shell command execution in agent handler — potential command injection if user input reaches this code path. **Recommendation:** - Remove `--privileged` flag from Docker configuration - Use parameterized commands instead of exec() - Add input validation before shell execution Scan: `npx skillfence scan .` (Verdict: BLOCK, 26 critical, 33 high) Responsible disclosure via automated security scanning.
yindo closed this issue 2026-06-05 14:51:13 -04:00
yindo commented 2026-06-05 14:51:13 -04:00
Author
Owner
Copy Link
Copy Source

@timothycarambat commented on GitHub (Mar 16, 2026):

Literally neither thing reported is even real. Both are hallucinations - banned from repo

<!-- gh-comment-id:4068706928 --> @timothycarambat commented on GitHub (Mar 16, 2026): Literally neither thing reported is even real. Both are hallucinations - banned from repo
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
Desktop
Docker
Integration Request
Integration Request
OS: Linux
OS: Mobile
OS: Windows
UI/UX
blocked
bug
bug
core-team-only
documentation
duplicate
embed-widget
enhancement
feature request
github_actions
good first issue
investigating
needs info / can't replicate
possible bug
pull-request
Mirrored from GitHub Pull Request
 question
stage: specifications
wontfix
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Mintplex-Labs/anything-llm#4972
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?