Skip to content
OpenAdvisories

Product · langgenius

dify

30 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.6
    CVE-2026-58141

    Dify < 1.15.0 SSRF Protection Bypass via Remote-Files Endpoints

    Dify before 1.15.0 contains a server-side request forgery vulnerability that allows any authenticated console user to bypass SSRF protections and issue arbitrary HTTP requests to internal services and cloud metadata endpoints due to the Squid proxy configurat…

    langgenius dify
  • High 8.3
    CVE-2026-105762

    Dify: Unauthenticated Server-Side Request Forgery in /console/api/remote-files/upload endpoint

    Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remote_files.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A …

    langgenius dify
  • High 7.1
    CVE-2026-105761 Public exploit

    Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP Servers

    Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/&lt;app_id&gt;/server endpoint in api/controllers/console/app/mcp_server.py used AppMCPServerController.put() to retrieve an AppMCPServer by the client-supplied se…

    langgenius dify
  • High 8.8
    CVE-2026-61461

    Dify < 1.16.0-rc1 SQL Injection via MyScale Vector Store search_by_full_text

    Dify before 1.16.0-rc1 contains a SQL injection vulnerability in the MyScale vector store backend that allows attackers to execute arbitrary SQL by supplying unsanitized search parameters to the search_by_full_text method without escaping or parameterization.…

    langgenius dify
  • High 8.4
    CVE-2025-67732

    Dify Vulnerable to Plaintext API Key Exposure via Model Provider Configuration Endpoint

    Dify is an open-source LLM app development platform. Prior to version 1.11.0, the API key is exposed in plaintext to the frontend, allowing non-administrator users to view and reuse it. This can lead to unauthorized access to third-party services, potentially…

    langgenius dify
  • High 7.6
    CVE-2025-43862

    Dify Allows Unauthorized Access and Modification of APP Orchestration

    Dify is an open-source LLM app development platform. Prior to version 0.6.12, a normal user is able to access and modify APP orchestration, even though the web UI of APP orchestration is not presented for a normal user. This access control flaw allows non-adm…

    langgenius dify