CVE-2026-6617

CVE-2026-6617 affects langgenius dify up to version 0.6.9. The vulnerability is in ApiToolManageService, specifically the get_api_tool_provider_remote_schema function within api_tools_manage_service.py. Reported behavior shows that manipulating the url argument enables server-side request forgery...