AI Security
CVE-2026-32626: Critical XSS-to-RCE vulnerability in AnythingLLM Desktop gives attackers full system control
A CVSS 9.6 streaming-phase XSS flaw in AnythingLLM Desktop's chat renderer escalates to full remote code execution on the host OS via insecure Electron configuration.
