CVE-2025-56157
published 2025-12-18CVE-2025-56157: Default credentials in Dify thru 1.5.1. PostgreSQL username and password specified in the docker-compose.yaml file included in its source code. NOTE: the…
PriorityP261critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.81%
52.4th percentile
Default credentials in Dify thru 1.5.1. PostgreSQL username and password specified in the docker-compose.yaml file included in its source code. NOTE: the Supplier reports that the Docker configuration does not make PostgreSQL (on TCP port 5432) exposed by default in version 1.0.1 or later.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| langgenius | dify | <= 1.5.1 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://dify.comhttps://gist.github.com/Cristliu/216ddbadaf3258498c93d408683ecabdhttps://gist.github.com/Cristliu/298f51cbc72c45d91632cd0d65aa8161https://github.com/langgenius/difyhttps://github.com/langgenius/dify/issues/15285https://github.com/langgenius/dify/pull/15286https://github.com/langgenius/dify/pull/15286.diffhttps://github.com/langgenius/dify/releases/tag/1.0.1https://gist.github.com/Cristliu/216ddbadaf3258498c93d408683ecabd
2025-12-18
Published