Mintplex-Labs/anything-llm · error

Invalid file name. Please choose a different file.

Error message

Invalid file name. Please choose a different file.

What it means

Validation on POST /system/upload-logo: the uploaded file's original name failed the validFilename check (unsafe characters, path traversal, or disallowed extension), so the file is refused with HTTP 400 to prevent writing a malicious or unusable asset.

Source

Thrown at server/endpoints/system.js:974

      }
    }
  );

  app.post(
    "/system/upload-logo",
    [
      validatedRequest,
      flexUserRoleValid([ROLES.admin, ROLES.manager]),
      handleAssetUpload,
    ],
    async (request, response) => {
      if (!request?.file || !request?.file.originalname) {
        return response.status(400).json({ message: "No logo file provided." });
      }

      if (!validFilename(request.file.originalname)) {
        return response.status(400).json({
          message: "Invalid file name. Please choose a different file.",
        });
      }

      try {
        const newFilename = await renameLogoFile(request.file.originalname);
        const existingLogoFilename = await SystemSettings.currentLogoFilename();
        await removeCustomLogo(existingLogoFilename);

        const { success, error } = await SystemSettings._updateSettings({
          logo_filename: newFilename,
        });

        return response.status(success ? 200 : 500).json({
          message: success
            ? "Logo uploaded successfully."
            : error || "Failed to update with new logo.",
        });
      } catch (error) {

View on GitHub (pinned to 20f6d3546c)

Solutions

  1. Rename the file to use a safe name (no path separators or special characters).
  2. Use a common image filename like 'logo.png'.
Defensive patterns

Strategy: validation

When it happens

Trigger: Thrown at server/endpoints/system.js:960 when the library encounters an invalid state.

Common situations: The uploaded logo filename failed validation.


AI-assisted analysis of Mintplex-Labs/anything-llm@20f6d3546c (2026-08-18). Data as JSON: /api/errors/f3a4bfe5b1915d7f. Report an issue: GitHub.