# langgenius dify. Every CVE that names langgenius dify among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [langgenius dify Sandbox Run \_\_init\_\_.py hard-coded credentials](https://agentprime.io/advisories/CVE-2026-123135.md) `CVE-2026-123135` · CVE record: langgenius dify · CVSS 5.3 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Hard-coded credentials - [Dify: Unauthenticated Server-Side Request Forgery in /console/api/remote-files/upload endpoint](https://agentprime.io/advisories/CVE-2026-105762.md) `CVE-2026-105762` · CVE record: langgenius dify · CVSS 8.3 High · Not analysed yet · Published 5 Oct 2026 · Tags: Server-side request forgery (SSRF) - [Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP Servers](https://agentprime.io/advisories/CVE-2026-105761.md) `CVE-2026-105761` · CVE record: langgenius dify · CVSS 7.1 High · Not analysed yet · Published 5 Oct 2026 · Tags: Broken access control - [langgenius dify WebApp Sign-In mail-and-password-auth.tsx router.replace cross site scripting](https://agentprime.io/advisories/CVE-2026-85022.md) `CVE-2026-85022` · CVE record: langgenius dify · CVSS 5.1 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [langgenius dify Splash Layout splash.tsx router.replace cross site scripting](https://agentprime.io/advisories/CVE-2026-85021.md) `CVE-2026-85021` · CVE record: langgenius dify · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection - [langgenius dify Jinja2 jinja2_transformer.py jinja2.Template special elements used in a template engine](https://agentprime.io/advisories/CVE-2026-18632.md) `CVE-2026-18632` · CVE record: langgenius dify · CVSS 5.3 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Code injection, CWE-791 - [Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability](https://agentprime.io/advisories/CVE-2026-18266.md) `CVE-2026-18266` · CVE record: LangGenius Dify · CVSS 5.4 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Open redirect - [Dify < 1.16.0-rc1 SQL Injection via MyScale Vector Store search_by_full_text](https://agentprime.io/advisories/CVE-2026-61461.md) `CVE-2026-61461` · CVE record: langgenius dify · CVSS 8.7 High · Not analysed yet · Published 10 Jul 2026 · Tags: SQL injection - [Dify < 1.14.2 Authorization Bypass via File Preview Endpoint](https://agentprime.io/advisories/CVE-2026-41949.md) `CVE-2026-41949` · CVE record: langgenius dify · CVSS 8.2 High · Not analysed yet · Published 18 May 2026 · Tags: Broken access control - [Dify v1.14.1 Path Traversal via Plugin Daemon Internal API Access](https://agentprime.io/advisories/CVE-2026-41948.md) `CVE-2026-41948` · CVE record: langgenius dify · CVSS 9.3 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.23 · Not analysed yet · Published 18 May 2026 · Tags: Path traversal - [Dify < 1.14.2 Authorization Bypass via Trace Configuration Endpoints](https://agentprime.io/advisories/CVE-2026-41947.md) `CVE-2026-41947` · CVE record: langgenius dify · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 May 2026 · Tags: Broken access control - [Dify < 1.14.0 Authorization Bypass via File UUID](https://agentprime.io/advisories/CVE-2026-41950.md) `CVE-2026-41950` · CVE record: langgenius dify · CVSS 6.0 Medium · Not analysed yet · Published 5 May 2026 · Tags: Broken access control - [Dify Vulnerable to Stored XSS via SVG-file upload](https://agentprime.io/advisories/CVE-2026-42138.md) `CVE-2026-42138` · CVE record: langgenius dify · CVSS 6.9 Medium · Not analysed yet · Published 4 May 2026 · Tags: Cross-site scripting (XSS) - [Dify has IDOR in deleting someone else's chat conversation](https://agentprime.io/advisories/CVE-2026-34082.md) `CVE-2026-34082` · CVE record: langgenius dify · CVSS 5.3 Medium · Not analysed yet · Published 20 Apr 2026 · Tags: Broken access control - [langgenius dify ImagePreview image-preview.tsx openInNewTab cross site scripting](https://agentprime.io/advisories/CVE-2026-6619.md) `CVE-2026-6619` · CVE record: langgenius dify · CVSS 5.1 Medium · Not analysed yet · Published 20 Apr 2026 · Tags: Cross-site scripting (XSS), Code injection - [langgenius dify ApiBasedToolSchemaParser parser.py parse_openai_plugin_json_to_tool_bundle server-side request forgery](https://agentprime.io/advisories/CVE-2026-6618.md) `CVE-2026-6618` · CVE record: langgenius dify · CVSS 5.3 Medium · Not analysed yet · Published 20 Apr 2026 · Tags: Server-side request forgery (SSRF) - [langgenius dify ApiToolManageService api_tools_manage_service.py get_api_tool_provider_remote_schema server-side request forgery](https://agentprime.io/advisories/CVE-2026-6617.md) `CVE-2026-6617` · CVE record: langgenius dify · CVSS 5.3 Medium · Not analysed yet · Published 20 Apr 2026 · Tags: Server-side request forgery (SSRF) - [Dify - Stored XSS in chat](https://agentprime.io/advisories/CVE-2026-21866.md) `CVE-2026-21866` · CVE record: langgenius dify · CVSS 5.1 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Cross-site scripting (XSS) - [Dify has a user enumeration issue](https://agentprime.io/advisories/CVE-2026-28288.md) `CVE-2026-28288` · CVE record: langgenius dify · CVSS 5.5 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: CWE-204 - [Client‑side DOM XSS in the web chat app of Dify when using echarts](https://agentprime.io/advisories/CVE-2026-26023.md) `CVE-2026-26023` · CVE record: langgenius dify · CVSS 5.3 Medium · Not analysed yet · Published 11 Feb 2026 · Tags: Cross-site scripting (XSS) - [Dify Vulnerable to Plaintext API Key Exposure via Model Provider Configuration Endpoint](https://agentprime.io/advisories/CVE-2025-67732.md) `CVE-2025-67732` · CVE record: langgenius dify · CVSS 8.4 High · Not analysed yet · Published 5 Jan 2026 · Tags: Information disclosure, Hard-coded credentials - [User Enumeration via Distinct Error Messages in langgenius/dify-web](https://agentprime.io/advisories/CVE-2025-11750.md) `CVE-2025-11750` · CVE record: langgenius langgenius/dify · CVSS 4.3 Medium · Not analysed yet · Published 22 Oct 2025 · Tags: CWE-544 - [Dify MCP OAuth Flow Vulnerable to XSS](https://agentprime.io/advisories/CVE-2025-58747.md) `CVE-2025-58747` · CVE record: langgenius dify · CVSS 2.0 Low · Not analysed yet · Published 17 Oct 2025 · Tags: Cross-site scripting (XSS) - [Dify Has Broken Access Control on Log Message Endpoint Allows Reading of Chats of Others](https://agentprime.io/advisories/CVE-2025-59422.md) `CVE-2025-59422` · CVE record: langgenius dify · CVSS 6.0 Medium · Not analysed yet · Published 25 Sept 2025 · Tags: Broken access control - [XSS Vulnerability in langgenius/dify](https://agentprime.io/advisories/CVE-2025-3467.md) `CVE-2025-3467` · CVE record: langgenius langgenius/dify · CVSS 8.0 High · Not analysed yet · Published 7 Jul 2025 · Tags: Cross-site scripting (XSS) - [Unsanitized Input in langgenius/dify](https://agentprime.io/advisories/CVE-2025-3466.md) `CVE-2025-3466` · CVE record: langgenius langgenius/dify · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-1100 - [Dify has XSS vulnerability](https://agentprime.io/advisories/CVE-2025-49149.md) `CVE-2025-49149` · CVE record: langgenius dify · CVSS 5.3 Medium · Not analysed yet · Published 17 Jun 2025 · Tags: Cross-site scripting (XSS) - [DIFY vulnerable to Clickjacking Attack](https://agentprime.io/advisories/CVE-2025-43854.md) `CVE-2025-43854` · CVE record: langgenius dify · CVSS 2.3 Low · Not analysed yet · Published 28 Apr 2025 · Tags: CWE-1021 - [Dify Allows Unauthorized Access and Modification of APP Orchestration](https://agentprime.io/advisories/CVE-2025-43862.md) `CVE-2025-43862` · CVE record: langgenius dify · CVSS 7.6 High · Not analysed yet · Published 25 Apr 2025 · Tags: Broken access control - [Dify Allows Unauthorized APP Enable/Disable via API](https://agentprime.io/advisories/CVE-2025-32796.md) `CVE-2025-32796` · CVE record: langgenius dify · CVSS 6.5 Medium · Not analysed yet · Published 18 Apr 2025 · Tags: Broken access control - [Dify Allows Insecure User Role Access Control for APP Editing](https://agentprime.io/advisories/CVE-2025-32795.md) `CVE-2025-32795` · CVE record: langgenius dify · CVSS 6.5 Medium · Not analysed yet · Published 18 Apr 2025 · Tags: Broken access control - [Dify Allows Insecure User Role Access Control for APP DSL Exporting](https://agentprime.io/advisories/CVE-2025-32790.md) `CVE-2025-32790` · CVE record: langgenius dify · CVSS 6.3 Medium · Not analysed yet · Published 18 Apr 2025 · Tags: Broken access control - [Server-Side Request Forgery (SSRF) in langgenius/dify](https://agentprime.io/advisories/CVE-2025-0184.md) `CVE-2025-0184` · CVE record: langgenius langgenius/dify · CVSS 6.5 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: Server-side request forgery (SSRF) - [Stored XSS in langgenius/dify](https://agentprime.io/advisories/CVE-2024-11850.md) `CVE-2024-11850` · CVE record: langgenius langgenius/dify · CVSS 6.8 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: Cross-site scripting (XSS) - [Authentication Bypass in langgenius/dify](https://agentprime.io/advisories/CVE-2024-12776.md) `CVE-2024-12776` · CVE record: langgenius langgenius/dify · CVSS 8.1 High · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-305 - [Code Injection in langgenius/dify](https://agentprime.io/advisories/CVE-2024-10252.md) `CVE-2024-10252` · CVE record: langgenius langgenius/dify · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2025 · Tags: Code injection - [Improper Restriction of Excessive Authentication Attempts in langgenius/dify](https://agentprime.io/advisories/CVE-2024-12039.md) `CVE-2024-12039` · CVE record: langgenius langgenius/dify · CVSS 7.4 High · Not analysed yet · Published 20 Mar 2025 · Tags: Authentication bypass - [SSRF in langgenius/dify](https://agentprime.io/advisories/CVE-2024-12775.md) `CVE-2024-12775` · CVE record: langgenius langgenius/dify · CVSS 6.5 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: Server-side request forgery (SSRF) - [Server-Side Request Forgery (SSRF) in langgenius/dify](https://agentprime.io/advisories/CVE-2024-11822.md) `CVE-2024-11822` · CVE record: langgenius langgenius/dify · CVSS 6.5 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: Server-side request forgery (SSRF) - [Pandas Query Injection in langgenius/dify](https://agentprime.io/advisories/CVE-2025-0185.md) `CVE-2025-0185` · CVE record: langgenius langgenius/dify · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2025 · Tags: Code injection - [Stored XSS in langgenius/dify](https://agentprime.io/advisories/CVE-2024-11824.md) `CVE-2024-11824` · CVE record: langgenius langgenius/dify · CVSS 5.8 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: Cross-site scripting (XSS) - [Privilege Escalation in langgenius/dify](https://agentprime.io/advisories/CVE-2024-11821.md) `CVE-2024-11821` · CVE record: langgenius langgenius/dify · CVSS 4.3 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: Privilege escalation - [Admin account takeover through weak Pseudo-Random number generator used in generating password reset codes in langgenius/dify](https://agentprime.io/advisories/CVE-2025-1796.md) `CVE-2025-1796` · CVE record: langgenius langgenius/dify · CVSS 7.5 High · Not analysed yet · Published 20 Mar 2025 · Tags: Weak cryptography or TLS ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .