# AnythingLLM unauthenticated /system/data-import access control bypass (CVE-2024-3279)

- **Severity:** Critical
- **Signature ID:** `cc237326-8d28-4e94-b06d-5712605b8042`
- **CVEs:** CVE-2024-3279
- **MITRE ATLAS:** AML.T0049 (Exploit Public-Facing Application)
- **OWASP:** ASI06 (Goal and Instruction Manipulation), LLM06 (Excessive Agency)

## Summary

Older versions of AnythingLLM exposed a data-import feature without requiring login. Anyone who can reach the server over the network could upload a replacement database file and overwrite the real one, which stores user accounts, settings, and other application data.

## How the attack works

The attacker sends a POST request directly to the /system/data-import endpoint without any authentication. The request carries a multipart form upload containing a crafted SQLite database file. The server accepts the upload and writes it over the existing anythingllm.db file. From that point the application runs on the attacker's data, which can spoof content shown to users or destroy the original records, including any user information stored there.

## Why it matters

An outside attacker can silently replace an organization's AnythingLLM database, wiping legitimate data, injecting fake data or accounts, and potentially exposing or corrupting stored user information, all without needing any credentials.

## What you can do

- Upgrade AnythingLLM to a version that requires authentication on the /system/data-import endpoint (fixed in 1.0.0 and later).
- Restrict network access to the AnythingLLM server so it is not reachable from the open internet or untrusted networks.
- Put the application behind a reverse proxy or gateway that enforces authentication before requests reach /system/data-import.
- Regularly back up anythingllm.db and monitor for unexpected changes or unauthorized upload requests to this endpoint.

## Known benign look-alikes

- Documentation or release notes describing the removed Export/Import feature without an actual unauthenticated upload request to /system/data-import
- Legitimate authenticated admin using a backup/restore tool that references anythingllm.db by path but does not POST it to the /system/data-import endpoint

## References

- https://agentthreatrule.org/en/rules/ATR-2026-01974
- https://nvd.nist.gov/vuln/detail/CVE-2024-3279

---
Source: https://www.netzilo.com/threats/atr-anythingllm-unauthenticated-system-data-import-access-contro