langgenius vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-105762 Dify is an open-source LLM app development platform.High 8.3 · Oct 5, 2026
• CVE-2026-105761 Dify is an open-source LLM app development platform.High 7.1 · Oct 5, 2026
• CVE-2026-61461 Dify before 1.16.0-rc1 contains a SQL injection vulnerability in the MyScale vector store backend that allows attackers to execute arbitrary SQL by supplying unHigh 8.7 · Jul 10, 2026
• CVE-2026-41949 Dify before version 1.14.2 contains an authorization bypass vulnerability in the file preview endpoint that allows any authenticated user to read up to 3,000 chHigh 8.2 · May 18, 2026
• CVE-2026-41948 Dify version 1.14.1 and prior contain a path traversal vulnerability that allows authenticated users to manipulate requests forwarded to the Plugin Daemon's intCritical 9.3 · May 18, 2026
• CVE-2026-41947 Dify before version 1.14.2 contains an authorization bypass vulnerability that allows authenticated editor users to set and enable trace configurations for any Critical 9.3 · May 18, 2026
• CVE-2025-67732 Dify is an open-source LLM app development platform.High 8.4 · Jan 5, 2026
• CVE-2025-63387 Dify v1.9.1 is vulnerable to Insecure Permissions.High 7.5 · Dec 18, 2025
• CVE-2025-56157 Default credentials in Dify thru 1.5.1.Critical 9.8 · Dec 18, 2025
• CVE-2025-63388 A Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the /console/api/system-features endpoint.Critical 9.1 · Dec 18, 2025
• CVE-2025-63386 A Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the /console/api/setup endpoint.Critical 9.1 · Dec 18, 2025
• CVE-2025-3466 langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with full root permissions.High 7.2 · Jul 7, 2025
• CVE-2025-43862 Dify is an open-source LLM app development platform.High 7.6 · Apr 25, 2025
• CVE-2025-1796 A vulnerability in langgenius/dify v0.10.1 allows an attacker to take over any account, including administrator accounts, by exploiting a weak pseudo-random numHigh 8.8 · Mar 20, 2025
• CVE-2025-0185 A vulnerability in the Dify Tools' Vanna module of the langgenius/dify repository allows for a Pandas Query Injection in the latest version.High 8.8 · Mar 20, 2025
• CVE-2024-12776 In langgenius/dify v0.10.1, the `/forgot-password/resets` endpoint does not verify the password reset code, allowing an attacker to reset the password of any usHigh 8.1 · Mar 20, 2025
• CVE-2024-12039 langgenius/dify version v0.10.1 contains a vulnerability where there are no limits applied to the number of code guess attempts for password reset.High 8.1 · Mar 20, 2025
• CVE-2024-11824 A stored cross-site scripting (XSS) vulnerability exists in langgenius/dify version latest, specifically in the chat log functionality.High 7.6 · Mar 20, 2025
• CVE-2024-11822 langgenius/dify version 0.9.1 contains a Server-Side Request Forgery (SSRF) vulnerability.High 7.5 · Mar 20, 2025
• CVE-2024-10252 A vulnerability in langgenius/dify versions <=v0.9.1 allows for code injection via internal SSRF requests in the Dify sandbox service.High 7.2 · Mar 20, 2025