Langgenius Dify vulnerabilities

CVE-2026-34082 [MEDIUM] CWE-284 CVE-2026-34082: Dify is an open-source LLM app development platform. Prior to 1.13.1, the method `DELETE /console/ap Dify is an open-source LLM app development platform. Prior to 1.13.1, the method `DELETE /console/api/installed-apps//conversations/` has poor authorization checking and allows any Dify-authenticated user to delete someone else's chat history. Version 1.13.1 patches the issue.

CVE-2026-6619 [LOW] CWE-79 CVE-2026-6619: A vulnerability has been found in langgenius dify up to 1.13.3. Impacted is the function openInNewTa A vulnerability has been found in langgenius dify up to 1.13.3. Impacted is the function openInNewTab of the file web/app/components/base/image-uploader/image-preview.tsx of the component ImagePreview. The manipulation of the argument filename leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public

CVE-2026-85022 [LOW] CWE-79 CVE-2026-85022: A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the func A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/(shareLayout)/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of the argument redirect_url leads to cross site scripting. The attack may be performed from remot

CVE-2025-29720 [MEDIUM] CWE-918 CVE-2025-29720: Dify v1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controlle Dify v1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_files.RemoteFileUploadApi.

CVE-2025-59422 [LOW] CWE-284 CVE-2025-59422: Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulne Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /console/api/apps/chat-messages?conversation_id=&limit=10 endpoint allows users in the same workspace to read chat messages of other users. A regular user is able to read the query data and the filename of the admins and probably other us