ZeroDay Findings
Sign inSign up

Findings

CVE-2026-31863

Anytype Heart is the middleware library for Anytype.

Published Mar 11, 2026 · updated Jun 17, 2026 · anytype anytype cli

Anytype Heart is the middleware library for Anytype. The challenge-based authentication for the local gRPC client API can be bypassed, allowing an attacker to gain access without the 4-digit code. This vulnerability is fixed in anytype-heart 0.48.4, anytype-cli 0.1.11, and Anytype Desktop 0.54.5.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 11, 2026 · NIST NVD

    Detected

    Anytype Heart is the middleware library for Anytype. The challenge-based authentication for the local gRPC client API can be bypassed, allowing an attacker to gain access without the 4-digit code. This vulnerability is fixed in anytype-heart 0.48.4, anytype-cli 0.1.11, and Anytype Desktop 0.54.5.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Anytype Heart is the middleware library for Anytype. The challenge-based authentication for the local gRPC client API can be bypassed, allowing an attacker to gain access without the 4-digit code. This vulnerability is fixed in anytype-heart 0.48.4, anytype-cli 0.1.11, and Anytype Desktop 0.54.5.

Affected

  • cpe anytype/anytype cliversion unspecified
  • cpe anytype/anytype desktopversion unspecified
  • cpe anytype/anytype heartversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-31863

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-31863

    Anytype Heart is the middleware library for Anytype. The challenge-based authentication for the local gRPC client API can be bypassed, allowing an attacker to gain access without the 4-digit code. This vulnerability is fixed in anytype-heart 0.48.4, anytype-cli 0.1.11, and Anytyp

    nvd.nist.gov

References