CVE-2026-123135

A vulnerability exists in langgenius dify versions up to 1.18.0/2.0.0-beta.2 within the Sandbox Run Handler component. Specifically, an unknown functionality in the file api/configs/feature/__init__.py allows for the manipulation resulting in hard-coded credentials . This issue can be triggered v...