Dify
Filed as: dify
Newest record 2026-11-06 · 38 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Exploited or KEV-listed · 0
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
No record for Dify has confirmed exploitation or a KEV flag.
Disclosures by month · last 24 months
Disclosed CVEs, no confirmed exploitation · 38
- closed7.2Dify CVE-2026-58141: Dify SSRF Vulnerability in Console API
Disclosed · Patched · since 6 Nov 2026 · CVE-2026-58141
AI - closed8.3Dify CVE-2026-105762: SSRF vulnerability in Dify remote file upload endpoint
Disclosed · since 6 Oct 2026 · CVE-2026-105762
AI - closed7.1Dify Dify Insecure Direct Object Reference in MCP Server Endpoint
Disclosed · since 5 Oct 2026 · CVE-2026-105761
AI - closed4.3Dify CVE-2026-85021: Cross-site scripting vulnerability in Langgenius Dify splash layout
Disclosed · since 3 Sep 2026 · CVE-2026-85021
AI - closed3.5Dify CVE-2026-85022: Cross-site scripting vulnerability in Langgenius Dify web app sign-in
Disclosed · since 3 Sep 2026 · CVE-2026-85022
AI - closed6.3Dify CVE-2026-18632: Template injection vulnerability in langgenius Dify
Disclosed · since 3 Aug 2026 · CVE-2026-18632
AI - closed5.4Dify CVE-2026-18266: Open redirect vulnerability in Dify AI Workflow OAuth flow
Disclosed · since 29 Jul 2026 · CVE-2026-18266
AI - closed8.8Dify CVE-2026-61461: Dify SQL Injection Vulnerability in MyScale Vector Store
Disclosed · since 10 Jul 2026 · CVE-2026-61461
AI - closed9.1Dify Dify Authorization Bypass Leads to Tenant Trace Configuration Exposure
Disclosed · since 18 May 2026 · CVE-2026-41947
AI - closed9.2Dify CVE-2026-41948: Dify path traversal in Plugin Daemon REST API
Disclosed · since 18 May 2026 · CVE-2026-41948
AI - closed8.2Dify CVE-2026-41949: Dify authorization bypass in file preview endpoint
Disclosed · since 18 May 2026 · CVE-2026-41949
AI - closed6.5Dify CVE-2026-41950: Authorization bypass in Dify allows unauthorized file access
Disclosed · since 5 May 2026 · CVE-2026-41950
AI - closed6.9Dify CVE-2026-42138: Unauthenticated XSS vulnerability in Dify
Disclosed · since 4 May 2026 · CVE-2026-42138
AI - closed5.3Dify CVE-2026-34082: Authorization flaw in Dify allows chat deletion
Disclosed · since 20 Apr 2026 · CVE-2026-34082
AI - closed3.5Dify CVE-2026-6619: Cross-site scripting vulnerability in Langgenius Dify
Disclosed · since 20 Apr 2026 · CVE-2026-6619
AI - closed6.3Dify CVE-2026-6618: Server-side request forgery vulnerability in langgenius dify parser
Disclosed · since 20 Apr 2026 · CVE-2026-6618
AI - closed6.3Dify CVE-2026-6617: Server-side request forgery vulnerability in langgenius dify
Disclosed · since 20 Apr 2026 · CVE-2026-6617
AI - closed5.4Dify CVE-2026-21866: Stored XSS vulnerability in Dify chat rendering of Mermaid diagrams
Disclosed · since 3 Mar 2026 · CVE-2026-21866
AI - closed5.5Dify CVE-2026-28288: Email enumeration vulnerability in Dify LLM development platform
Disclosed · since 27 Feb 2026 · CVE-2026-28288
AI - closed6.1Dify CVE-2026-26023: Cross-site scripting vulnerability in Dify LLM platform
Disclosed · since 11 Feb 2026 · CVE-2026-26023
AI - closed8.4Dify CVE-2025-67732: API Key Exposure Vulnerability in Dify
Disclosed · since 5 Jan 2026 · CVE-2025-67732
AI - closed9.8Dify CVE-2025-56157: Default database credentials present in Dify configuration
Disclosed · since 18 Dec 2025 · CVE-2025-56157
AI - closed9.1Dify CVE-2025-63386: CORS misconfiguration vulnerability in Dify setup endpoint
Disclosed · since 18 Dec 2025 · CVE-2025-63386
AI - closed9.1Dify CVE-2025-63388: CORS misconfiguration in Dify console system features endpoint
Disclosed · since 18 Dec 2025 · CVE-2025-63388
AI - closed7.5Dify CVE-2025-63387: Insecure permissions in Dify system features endpoint
Disclosed · since 18 Dec 2025 · CVE-2025-63387
AI - closed6.1Dify CVE-2025-58747: Cross-site scripting vulnerability in Dify MCP OAuth component
Disclosed · since 17 Oct 2025 · CVE-2025-58747
AI - closed5.3Dify CVE-2025-56520: Server-Side Request Forgery vulnerability in Dify v1.6.0
Disclosed · since 30 Sep 2025 · CVE-2025-56520
AI - closed6.0Dify CVE-2025-59422: Broken access control vulnerability in Dify exposes chat messages
Disclosed · since 25 Sep 2025 · CVE-2025-59422
AI - closed9.8Dify CVE-2025-3466: Unsanitized input vulnerability in langgenius/dify code node
Disclosed · since 7 Jul 2025 · CVE-2025-3466
AI - closed6.1Dify CVE-2025-49149: Cross-site scripting vulnerability in Dify
Disclosed · since 17 Jun 2025 · CVE-2025-49149
AI - closed6.1Dify CVE-2025-43854: Clickjacking Vulnerability in Dify Platform
Disclosed · since 28 Apr 2025 · CVE-2025-43854
AI - closed7.6Dify CVE-2025-43862: Access Control Flaw in Dify LLM Platform
Disclosed · since 25 Apr 2025 · CVE-2025-43862
AI - closed6.3Dify CVE-2025-32790: Unauthorized App DSL Export Vulnerability in Dify
Disclosed · since 18 Apr 2025 · CVE-2025-32790
AI - closed6.5Dify CVE-2025-32796: Access Control Flaw in Dify LLM App Platform
Disclosed · since 18 Apr 2025 · CVE-2025-32796
AI - closed6.5Dify CVE-2025-32795: Authorization bypass vulnerability in Dify app management
Disclosed · since 18 Apr 2025 · CVE-2025-32795
AI - closed4.8Dify CVE-2025-29720: Server-Side Request Forgery vulnerability in Dify
Disclosed · since 14 Apr 2025 · CVE-2025-29720
AI - closed8.8Dify CVE-2024-10252: Code injection vulnerability in Dify sandbox service
Disclosed · since 20 Mar 2025 · CVE-2024-10252
AI - closed8.8Dify CVE-2025-0185: Pandas query injection vulnerability in Dify Vanna module
Disclosed · since 20 Mar 2025 · CVE-2025-0185
AI
Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.