EUVD-2026-117723

A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2. Affected by this vulnerability is an unknown functionality of the file api/configs/feature/init.py of the component Sandbox Run Handler. The manipulation results in hard-coded credentials. The attack can be launched remotely...

CVE-2026-123135

A vulnerability exists in langgenius dify versions up to 1.18.0/2.0.0-beta.2 within the Sandbox Run Handler component. Specifically, an unknown functionality in the file api/configs/feature/__init__.py allows for the manipulation resulting in hard-coded credentials . This issue can be triggered v...