← Back

CVE-2026-31863

nvd nist
Published: Mar 11, 2026Modified: Jun 17, 2026

JSON object

Loading...
4.4
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Exploitability: 1.8 / Impact: 2.5
Source: NVD

Description

Anytype Heart is the middleware library for Anytype. The challenge-based authentication for the local gRPC client API can be bypassed, allowing an attacker to gain access without the 4-digit code. This vulnerability is fixed in anytype-heart 0.48.4, anytype-cli 0.1.11, and Anytype Desktop 0.54.5.

Affected (3)

Anytype
3 products
Anytype Cli
Anytype Desktop
Anytype Heart
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Anytype Cli
Before 0.1.11
Anytype Desktop
Before 0.54.5
Anytype Heart
Before 0.48.4

Related CWEs

CWE-307
Improper Restriction of Excessive Authentication Attempts
The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

References (1)

Source: security-advisories@github.com
PatchVendor Advisory

Timeline

No history available yet.