Database disclosure and deletion via path traversal

Path traversal in AnythingLLM before 1.2.2 allows remote authenticated users with manager access to expose and delete its database. The /api/document/move-files endpoint joins attacker-controlled source and destination paths beneath the documents directory, then passes them to fs.rename without verifying that the resolved paths remain inside that directory. Manager-level access is required; exploitation can place anythingllm.db in a public directory for download and remove it from its original location, exposing stored data and interrupting access.