LangGenius Dify

Default credentials in Dify thru 1.5.1. PostgreSQL username and password specified in the docker-compose.yaml file included in its source code. NOTE: the Supplier reports that the Docker configuration does not make PostgreSQL (on TCP port 5432) exposed by default in version 1.0.1 or later.

Unsanitized Input in langgenius/dify

A Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the /console/api/setup endpoint. The endpoint implements an insecure CORS policy that reflects any Origin header and enables Access-Control-Allow-Credentials: true, permitting arbitrary external domains to make authenticated requests. NOTE: the Supplier disputes this because the endpoint configuration is intentional to support bootstrap.

A Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the /console/api/system-features endpoint. The endpoint implements an overly permissive CORS policy that reflects arbitrary Origin headers and sets Access-Control-Allow-Credentials: true, allowing any external domain to make authenticated cross-origin requests. NOTE: the Supplier disputes this, providing the rationale of "sending requests with credentials does not provide any additional access compared to unauthenticated requests."

Code Injection in langgenius/dify

Admin account takeover through weak Pseudo-Random number generator used in generating password reset codes in langgenius/dify

Improper Restriction of Excessive Authentication Attempts in langgenius/dify

Authentication Bypass in langgenius/dify

XSS Vulnerability in langgenius/dify

Stored XSS in langgenius/dify

Dify Allows Unauthorized Access and Modification of APP Orchestration

Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to the /console/api/system-features endpoint without any authentication credentials or session tokens. The endpoint fails to implement proper authorization checks, allowing anonymous access to sensitive system configuration data. NOTE: The maintainer states that the endpoint is unauthenticated by design and serves as a bootstrap mechanism required for the dashboard initialization. They also state that the description inaccurately classifies the returned data as sensitive system configuration, stating that the data is non-sensitive and required for client-side rendering. No PII, credentials, or secrets are exposed.

Dify Vulnerable to Stored XSS via SVG-file upload

Stored XSS in langgenius/dify

SSRF in langgenius/dify

Server-Side Request Forgery (SSRF) in langgenius/dify

Dify < 1.14.0 Authorization Bypass via File UUID

Dify Allows Unauthorized APP Enable/Disable via API

Dify Allows Insecure User Role Access Control for APP Editing

Dify Allows Insecure User Role Access Control for APP DSL Exporting

Dify MCP OAuth Flow Vulnerable to XSS

Dify has XSS vulnerability

DIFY vulnerable to Clickjacking Attack

Dify Has Broken Access Control on Log Message Endpoint Allows Reading of Chats of Others

User Enumeration via Distinct Error Messages in langgenius/dify-web

Dify v1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_files.RemoteFileUploadApi.

Privilege Escalation in langgenius/dify