Vulnerability Details CVE-2026-31863
Anytype Heart is the middleware library for Anytype. The challenge-based authentication for the local gRPC client API can be bypassed, allowing an attacker to gain access without the 4-digit code. This vulnerability is fixed in anytype-heart 0.48.4, anytype-cli 0.1.11, and Anytype Desktop 0.54.5.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 5.2%
CVSS Severity
CVSS v3 Score 3.6
Products affected by CVE-2026-31863
-
cpe:2.3:a:anytype:anytype_cli:0.0.1
-
cpe:2.3:a:anytype:anytype_cli:0.0.2
-
cpe:2.3:a:anytype:anytype_cli:0.0.3
-
cpe:2.3:a:anytype:anytype_cli:0.0.4
-
cpe:2.3:a:anytype:anytype_cli:0.0.5
-
cpe:2.3:a:anytype:anytype_cli:0.0.6
-
cpe:2.3:a:anytype:anytype_cli:0.0.7
-
cpe:2.3:a:anytype:anytype_cli:0.0.8
-
cpe:2.3:a:anytype:anytype_cli:0.0.9
-
cpe:2.3:a:anytype:anytype_cli:0.1.0
-
cpe:2.3:a:anytype:anytype_cli:0.1.1
-
cpe:2.3:a:anytype:anytype_cli:0.1.10
-
cpe:2.3:a:anytype:anytype_cli:0.1.2
-
cpe:2.3:a:anytype:anytype_cli:0.1.3
-
cpe:2.3:a:anytype:anytype_cli:0.1.4
-
cpe:2.3:a:anytype:anytype_cli:0.1.5
-
cpe:2.3:a:anytype:anytype_cli:0.1.6
-
cpe:2.3:a:anytype:anytype_cli:0.1.7
-
cpe:2.3:a:anytype:anytype_cli:0.1.8
-
cpe:2.3:a:anytype:anytype_cli:0.1.9
-
cpe:2.3:a:anytype:anytype_desktop:*
-
cpe:2.3:a:anytype:anytype_heart:0.26.3
-
cpe:2.3:a:anytype:anytype_heart:0.26.4
-
cpe:2.3:a:anytype:anytype_heart:0.26.5
-
cpe:2.3:a:anytype:anytype_heart:0.26.6
-
cpe:2.3:a:anytype:anytype_heart:0.27.0
-
cpe:2.3:a:anytype:anytype_heart:0.27.1
-
cpe:2.3:a:anytype:anytype_heart:0.27.10
-
cpe:2.3:a:anytype:anytype_heart:0.27.11
-
cpe:2.3:a:anytype:anytype_heart:0.27.12
-
cpe:2.3:a:anytype:anytype_heart:0.27.13
-
cpe:2.3:a:anytype:anytype_heart:0.27.14
-
cpe:2.3:a:anytype:anytype_heart:0.27.15
-
cpe:2.3:a:anytype:anytype_heart:0.27.16
-
cpe:2.3:a:anytype:anytype_heart:0.27.17
-
cpe:2.3:a:anytype:anytype_heart:0.27.18
-
cpe:2.3:a:anytype:anytype_heart:0.27.19
-
cpe:2.3:a:anytype:anytype_heart:0.27.2
-
cpe:2.3:a:anytype:anytype_heart:0.27.20
-
cpe:2.3:a:anytype:anytype_heart:0.27.21
-
cpe:2.3:a:anytype:anytype_heart:0.27.3
-
cpe:2.3:a:anytype:anytype_heart:0.27.4
-
cpe:2.3:a:anytype:anytype_heart:0.27.5
-
cpe:2.3:a:anytype:anytype_heart:0.27.6
-
cpe:2.3:a:anytype:anytype_heart:0.27.7
-
cpe:2.3:a:anytype:anytype_heart:0.27.8
-
cpe:2.3:a:anytype:anytype_heart:0.27.9
-
cpe:2.3:a:anytype:anytype_heart:0.28.0
-
cpe:2.3:a:anytype:anytype_heart:0.28.1
-
cpe:2.3:a:anytype:anytype_heart:0.28.2
-
cpe:2.3:a:anytype:anytype_heart:0.28.3
-
cpe:2.3:a:anytype:anytype_heart:0.28.4
-
cpe:2.3:a:anytype:anytype_heart:0.28.5
-
cpe:2.3:a:anytype:anytype_heart:0.28.6
-
cpe:2.3:a:anytype:anytype_heart:0.28.7
-
cpe:2.3:a:anytype:anytype_heart:0.29.0
-
cpe:2.3:a:anytype:anytype_heart:0.29.1
-
cpe:2.3:a:anytype:anytype_heart:0.29.10
-
cpe:2.3:a:anytype:anytype_heart:0.29.11
-
cpe:2.3:a:anytype:anytype_heart:0.29.12
-
cpe:2.3:a:anytype:anytype_heart:0.29.13
-
cpe:2.3:a:anytype:anytype_heart:0.29.14
-
cpe:2.3:a:anytype:anytype_heart:0.29.15
-
cpe:2.3:a:anytype:anytype_heart:0.29.16
-
cpe:2.3:a:anytype:anytype_heart:0.29.17
-
cpe:2.3:a:anytype:anytype_heart:0.29.2
-
cpe:2.3:a:anytype:anytype_heart:0.29.3
-
cpe:2.3:a:anytype:anytype_heart:0.29.4
-
cpe:2.3:a:anytype:anytype_heart:0.29.5
-
cpe:2.3:a:anytype:anytype_heart:0.29.6
-
cpe:2.3:a:anytype:anytype_heart:0.29.7
-
cpe:2.3:a:anytype:anytype_heart:0.29.8
-
cpe:2.3:a:anytype:anytype_heart:0.29.9
-
cpe:2.3:a:anytype:anytype_heart:0.30.0
-
cpe:2.3:a:anytype:anytype_heart:0.30.1
-
cpe:2.3:a:anytype:anytype_heart:0.30.11
-
cpe:2.3:a:anytype:anytype_heart:0.30.12
-
cpe:2.3:a:anytype:anytype_heart:0.30.13
-
cpe:2.3:a:anytype:anytype_heart:0.30.14
-
cpe:2.3:a:anytype:anytype_heart:0.30.15
-
cpe:2.3:a:anytype:anytype_heart:0.30.2
-
cpe:2.3:a:anytype:anytype_heart:0.30.3
-
cpe:2.3:a:anytype:anytype_heart:0.30.4
-
cpe:2.3:a:anytype:anytype_heart:0.30.5
-
cpe:2.3:a:anytype:anytype_heart:0.30.6
-
cpe:2.3:a:anytype:anytype_heart:0.30.7
-
cpe:2.3:a:anytype:anytype_heart:0.30.8
-
cpe:2.3:a:anytype:anytype_heart:0.30.9
-
cpe:2.3:a:anytype:anytype_heart:0.31.0
-
cpe:2.3:a:anytype:anytype_heart:0.31.1
-
cpe:2.3:a:anytype:anytype_heart:0.31.3
-
cpe:2.3:a:anytype:anytype_heart:0.31.4
-
cpe:2.3:a:anytype:anytype_heart:0.31.5
-
cpe:2.3:a:anytype:anytype_heart:0.32.0
-
cpe:2.3:a:anytype:anytype_heart:0.32.1
-
cpe:2.3:a:anytype:anytype_heart:0.32.2
-
cpe:2.3:a:anytype:anytype_heart:0.32.3
-
cpe:2.3:a:anytype:anytype_heart:0.33.0
-
cpe:2.3:a:anytype:anytype_heart:0.33.1
-
cpe:2.3:a:anytype:anytype_heart:0.33.2
-
cpe:2.3:a:anytype:anytype_heart:0.33.3
-
cpe:2.3:a:anytype:anytype_heart:0.33.4
-
cpe:2.3:a:anytype:anytype_heart:0.33.5
-
cpe:2.3:a:anytype:anytype_heart:0.33.6
-
cpe:2.3:a:anytype:anytype_heart:0.33.7
-
cpe:2.3:a:anytype:anytype_heart:0.34.0
-
cpe:2.3:a:anytype:anytype_heart:0.34.1
-
cpe:2.3:a:anytype:anytype_heart:0.34.2
-
cpe:2.3:a:anytype:anytype_heart:0.34.3
-
cpe:2.3:a:anytype:anytype_heart:0.35.0
-
cpe:2.3:a:anytype:anytype_heart:0.35.1
-
cpe:2.3:a:anytype:anytype_heart:0.35.2
-
cpe:2.3:a:anytype:anytype_heart:0.35.3
-
cpe:2.3:a:anytype:anytype_heart:0.35.4
-
cpe:2.3:a:anytype:anytype_heart:0.35.5
-
cpe:2.3:a:anytype:anytype_heart:0.35.6
-
cpe:2.3:a:anytype:anytype_heart:0.35.7
-
cpe:2.3:a:anytype:anytype_heart:0.36.0
-
cpe:2.3:a:anytype:anytype_heart:0.36.1
-
cpe:2.3:a:anytype:anytype_heart:0.36.10
-
cpe:2.3:a:anytype:anytype_heart:0.36.2
-
cpe:2.3:a:anytype:anytype_heart:0.36.3
-
cpe:2.3:a:anytype:anytype_heart:0.36.4
-
cpe:2.3:a:anytype:anytype_heart:0.36.5
-
cpe:2.3:a:anytype:anytype_heart:0.36.6
-
cpe:2.3:a:anytype:anytype_heart:0.36.7
-
cpe:2.3:a:anytype:anytype_heart:0.36.8
-
cpe:2.3:a:anytype:anytype_heart:0.36.9
-
cpe:2.3:a:anytype:anytype_heart:0.37.0
-
cpe:2.3:a:anytype:anytype_heart:0.37.1
-
cpe:2.3:a:anytype:anytype_heart:0.37.3
-
cpe:2.3:a:anytype:anytype_heart:0.37.4
-
cpe:2.3:a:anytype:anytype_heart:0.38.0
-
cpe:2.3:a:anytype:anytype_heart:0.38.1
-
cpe:2.3:a:anytype:anytype_heart:0.38.2
-
cpe:2.3:a:anytype:anytype_heart:0.38.3
-
cpe:2.3:a:anytype:anytype_heart:0.38.4
-
cpe:2.3:a:anytype:anytype_heart:0.38.5
-
cpe:2.3:a:anytype:anytype_heart:0.38.6
-
cpe:2.3:a:anytype:anytype_heart:0.38.7
-
cpe:2.3:a:anytype:anytype_heart:0.38.8
-
cpe:2.3:a:anytype:anytype_heart:0.38.9
-
cpe:2.3:a:anytype:anytype_heart:0.39.0
-
cpe:2.3:a:anytype:anytype_heart:0.39.1
-
cpe:2.3:a:anytype:anytype_heart:0.39.10
-
cpe:2.3:a:anytype:anytype_heart:0.39.11
-
cpe:2.3:a:anytype:anytype_heart:0.39.12
-
cpe:2.3:a:anytype:anytype_heart:0.39.2
-
cpe:2.3:a:anytype:anytype_heart:0.39.3
-
cpe:2.3:a:anytype:anytype_heart:0.39.4
-
cpe:2.3:a:anytype:anytype_heart:0.39.5
-
cpe:2.3:a:anytype:anytype_heart:0.39.6
-
cpe:2.3:a:anytype:anytype_heart:0.39.7
-
cpe:2.3:a:anytype:anytype_heart:0.39.8
-
cpe:2.3:a:anytype:anytype_heart:0.39.9
-
cpe:2.3:a:anytype:anytype_heart:0.40.0
-
cpe:2.3:a:anytype:anytype_heart:0.40.1
-
cpe:2.3:a:anytype:anytype_heart:0.40.10
-
cpe:2.3:a:anytype:anytype_heart:0.40.11
-
cpe:2.3:a:anytype:anytype_heart:0.40.12
-
cpe:2.3:a:anytype:anytype_heart:0.40.13
-
cpe:2.3:a:anytype:anytype_heart:0.40.14
-
cpe:2.3:a:anytype:anytype_heart:0.40.15
-
cpe:2.3:a:anytype:anytype_heart:0.40.16
-
cpe:2.3:a:anytype:anytype_heart:0.40.17
-
cpe:2.3:a:anytype:anytype_heart:0.40.18
-
cpe:2.3:a:anytype:anytype_heart:0.40.19
-
cpe:2.3:a:anytype:anytype_heart:0.40.2
-
cpe:2.3:a:anytype:anytype_heart:0.40.20
-
cpe:2.3:a:anytype:anytype_heart:0.40.21
-
cpe:2.3:a:anytype:anytype_heart:0.40.22
-
cpe:2.3:a:anytype:anytype_heart:0.40.3
-
cpe:2.3:a:anytype:anytype_heart:0.40.4
-
cpe:2.3:a:anytype:anytype_heart:0.40.5
-
cpe:2.3:a:anytype:anytype_heart:0.40.6
-
cpe:2.3:a:anytype:anytype_heart:0.40.7
-
cpe:2.3:a:anytype:anytype_heart:0.40.8
-
cpe:2.3:a:anytype:anytype_heart:0.40.9
-
cpe:2.3:a:anytype:anytype_heart:0.41.0
-
cpe:2.3:a:anytype:anytype_heart:0.41.1
-
cpe:2.3:a:anytype:anytype_heart:0.41.2
-
cpe:2.3:a:anytype:anytype_heart:0.41.3
-
cpe:2.3:a:anytype:anytype_heart:0.42.0
-
cpe:2.3:a:anytype:anytype_heart:0.42.1
-
cpe:2.3:a:anytype:anytype_heart:0.42.2
-
cpe:2.3:a:anytype:anytype_heart:0.42.3
-
cpe:2.3:a:anytype:anytype_heart:0.42.4
-
cpe:2.3:a:anytype:anytype_heart:0.43.0
-
cpe:2.3:a:anytype:anytype_heart:0.44.0
-
cpe:2.3:a:anytype:anytype_heart:0.44.1
-
cpe:2.3:a:anytype:anytype_heart:0.44.2
-
cpe:2.3:a:anytype:anytype_heart:0.44.3
-
cpe:2.3:a:anytype:anytype_heart:0.44.4
-
cpe:2.3:a:anytype:anytype_heart:0.44.5
-
cpe:2.3:a:anytype:anytype_heart:0.44.6
-
cpe:2.3:a:anytype:anytype_heart:0.45.0
-
cpe:2.3:a:anytype:anytype_heart:0.45.1
-
cpe:2.3:a:anytype:anytype_heart:0.45.2
-
cpe:2.3:a:anytype:anytype_heart:0.45.3
-
cpe:2.3:a:anytype:anytype_heart:0.45.4
-
cpe:2.3:a:anytype:anytype_heart:0.45.5
-
cpe:2.3:a:anytype:anytype_heart:0.45.6
-
cpe:2.3:a:anytype:anytype_heart:0.46.0
-
cpe:2.3:a:anytype:anytype_heart:0.46.1
-
cpe:2.3:a:anytype:anytype_heart:0.46.2
-
cpe:2.3:a:anytype:anytype_heart:0.46.3
-
cpe:2.3:a:anytype:anytype_heart:0.47.0
-
cpe:2.3:a:anytype:anytype_heart:0.47.1
-
cpe:2.3:a:anytype:anytype_heart:0.47.2
-
cpe:2.3:a:anytype:anytype_heart:0.48.0
-
cpe:2.3:a:anytype:anytype_heart:0.48.1
-
cpe:2.3:a:anytype:anytype_heart:0.48.3