PT-2025-12146 · Langgenius · Dify

Name of the Vulnerable Software and Affected Versions: langgenius/dify version 0.10.1 Description: The issue concerns the /forgot-password/resets endpoint, which does not verify the password reset code. This allows an attacker to reset the password of any user, including administrators, potential...

dify security vulnerabilities

dify is an open source LLM application development platform from LangGenius Open Source. A security vulnerability exists in dify, which stems from the vulnerability of the Vanna module of Dify Tools to a Pandas query injection attack that could lead to remote code execution...

dify code injection vulnerability

dify is an open source LLM application development platform from LangGenius Open Source. A code injection vulnerability exists in dify v0.9.1 and prior versions, which stems from an internal SSRF request that could lead to code injection that could remove the entire sandbox service...

PT-2025-12030

Name of the Vulnerable Software and Affected Versions langgenius/dify versions =v0.9.1 Description A vulnerability in the Dify sandbox service allows for code injection via internal SSRF requests. This enables an attacker to execute arbitrary Python code with root privileges within the sandbox...

CVE-2024-10252: Improper Control of Generation of Code

A vulnerability in langgenius/dify versions =v0.9.1 allows for code injection via internal SSRF requests in the Dify sandbox service. This vulnerability enables an attacker to execute arbitrary Python code with root privileges within the sandbox environment, potentially leading to the deletion of...

PT-2025-12110

Name of the Vulnerable Software and Affected Versions langgenius/dify version 0.9.1 Description A privilege escalation issue exists, allowing a normal user to modify Orchestrate instructions for a chatbot created by an admin user. The problem arises because the application does not properly enfor...

CVE-2024-11821: Execution with Unnecessary Privileges

A privilege escalation vulnerability exists in langgenius/dify version 0.9.1. This vulnerability allows a normal user to modify Orchestrate instructions for a chatbot created by an admin user. The issue arises because the application does not properly enforce access controls on the endpoint...

PT-2025-12113

Name of the Vulnerable Software and Affected Versions langgenius/dify affected versions not specified Description A stored cross-site scripting XSS issue exists due to improper validation and sanitization of user input in SVG markdown support within the chatbot feature. An attacker can exploit th...

CVE-2024-11850: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in the latest version of langgenius/dify. The vulnerability is due to improper validation and sanitization of user input in SVG markdown support within the chatbot feature. An attacker can exploit this vulnerability by injecting malicious SVG...

Dify Cross-Site Scripting Vulnerability

dify is an open source LLM application development platform from LangGenius Open Source. A cross-site scripting vulnerability exists in dify, which stems from improper validation and cleanup of user input in the SVG markdown support and could lead to a stored cross-site scripting attack...

CVE-2024-11824: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in langgenius/dify version latest, specifically in the chat log functionality. The vulnerability arises because certain HTML tags like and are not disallowed, allowing an attacker to inject malicious HTML into the log via prompts. When an adm...

Dify Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Dify instance on the target application. Dify is an open-source LLM app development platform. This detection is included in the AI and LLM category. No source data...