PT-2025-12146 · Langgenius · Dify

Name of the Vulnerable Software and Affected Versions: langgenius/dify version 0.10.1 Description: The issue concerns the /forgot-password/resets endpoint, which does not verify the password reset code. This allows an attacker to reset the password of any user, including administrators, potential...

CVE-2024-10252: Improper Control of Generation of Code

A vulnerability in langgenius/dify versions =v0.9.1 allows for code injection via internal SSRF requests in the Dify sandbox service. This vulnerability enables an attacker to execute arbitrary Python code with root privileges within the sandbox environment, potentially leading to the deletion of...

CVE-2025-0185: Improper Control of Generation of Code

A vulnerability in the Dify Tools' Vanna module of the langgenius/dify repository allows for a Pandas Query Injection in the latest version. The vulnerability occurs in the function vn.gettrainingplangenericdfinformationschema, which does not properly sanitize user inputs before executing queries...

PT-2025-12111

Name of the Vulnerable Software and Affected Versions langgenius/dify version 0.9.1 Description The issue is related to a Server-Side Request Forgery SSRF vulnerability. This vulnerability exists due to the improper handling of the api endpoint parameter, allowing an attacker to make direct...

CVE-2024-12776: Authentication Bypass by Primary Weakness

In langgenius/dify v0.10.1, the /forgot-password/resets endpoint does not verify the password reset code, allowing an attacker to reset the password of any user, including administrators. This vulnerability can lead to a complete compromise of the application...

PT-2025-12301

Name of the Vulnerable Software and Affected Versions langgenius/dify version 0.10.2 Description A Server-Side Request Forgery SSRF issue was identified in the 'Create Knowledge' section when uploading DOCX files. If an external relationship exists in the DOCX file, the reltype value is requested...

PT-2025-12112

Name of the Vulnerable Software and Affected Versions langgenius/dify versions prior to 0.12.1 Description A stored cross-site scripting XSS issue exists in the chat log functionality. This occurs because certain HTML tags, such as and , are not properly restricted, allowing an attacker to inject...

PT-2025-12115

Name of the Vulnerable Software and Affected Versions langgenius/dify version v0.10.1 Description The issue arises from the lack of limits on the number of code guess attempts for password reset. This allows an unauthenticated attacker to reset owner, admin, or other user passwords within a few...

CVE-2024-12775: Server-Side Request Forgery (SSRF)

langgenius/dify version 0.10.1 contains a Server-Side Request Forgery SSRF vulnerability in the test functionality for the Create Custom Tool option via the REST API POST /console/api/workspaces/current/tool-provider/api/test/pre. Attackers can set the url in the servers dictionary in OpenAI's...

CVE-2024-11824: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in langgenius/dify version latest, specifically in the chat log functionality. The vulnerability arises because certain HTML tags like and are not disallowed, allowing an attacker to inject malicious HTML into the log via prompts. When an adm...

CVE-2025-1796: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

A vulnerability in langgenius/dify v0.10.1 allows an attacker to take over any account, including administrator accounts, by exploiting a weak pseudo-random number generator PRNG used for generating password reset codes. The application uses random.randint for this purpose, which is not suitable...

CVE-2024-12039: Improper Restriction of Excessive Authentication Attempts

langgenius/dify version v0.10.1 contains a vulnerability where there are no limits applied to the number of code guess attempts for password reset. This allows an unauthenticated attacker to reset owner, admin, or other user passwords within a few hours by guessing the six-digit code, resulting i...

PT-2025-12110

Name of the Vulnerable Software and Affected Versions langgenius/dify version 0.9.1 Description A privilege escalation issue exists, allowing a normal user to modify Orchestrate instructions for a chatbot created by an admin user. The problem arises because the application does not properly enfor...

CVE-2024-11850: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in the latest version of langgenius/dify. The vulnerability is due to improper validation and sanitization of user input in SVG markdown support within the chatbot feature. An attacker can exploit this vulnerability by injecting malicious SVG...

CVE-2024-11822: Server-Side Request Forgery (SSRF)

langgenius/dify version 0.9.1 contains a Server-Side Request Forgery SSRF vulnerability. The vulnerability exists due to improper handling of the apiendpoint parameter, allowing an attacker to make direct requests to internal network services. This can lead to unauthorized access to internal...

CVE-2025-0184: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability was identified in langgenius/dify version 0.10.2. The vulnerability occurs in the 'Create Knowledge' section when uploading DOCX files. If an external relationship exists in the DOCX file, the reltype value is requested as a URL using the 'requests...

PT-2025-12113

Name of the Vulnerable Software and Affected Versions langgenius/dify affected versions not specified Description A stored cross-site scripting XSS issue exists due to improper validation and sanitization of user input in SVG markdown support within the chatbot feature. An attacker can exploit th...

PT-2025-12030

Name of the Vulnerable Software and Affected Versions langgenius/dify versions =v0.9.1 Description A vulnerability in the Dify sandbox service allows for code injection via internal SSRF requests. This enables an attacker to execute arbitrary Python code with root privileges within the sandbox...

CVE-2024-11821: Execution with Unnecessary Privileges

A privilege escalation vulnerability exists in langgenius/dify version 0.9.1. This vulnerability allows a normal user to modify Orchestrate instructions for a chatbot created by an admin user. The issue arises because the application does not properly enforce access controls on the endpoint...