CVE-2026-105762— Dify: Unauthenticated Server-Side Request Forgery in /console/api/remote-files/upload endpoint
Quick assessment
Affected
langgenius dify
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Dify 是一个开源的大语言模型（LLM）应用开发平台。在 1.13.0 版本之前， 中的 端点在未进行身份验证的情况下，接受了攻击者可控的 URL，并导致 Dify 服务器主动获取该 URL 指向的内容。远程攻击者可以利用此端点向内部服务或云元数据端点发起请求，从而可能导致敏感数据泄露，并将 Dify 服务器用作网络跳板。该问题已在 1.13.0 版本中得到修复。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-105762
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Dify: Unauthenticated Server-Side Request Forgery in /console/api/remote-files/upload endpoint
Source: CVE Program / CVE List V5
Vulnerability Description
Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remote_files.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint to send requests to internal services or cloud metadata endpoints, potentially exposing sensitive data and using the server as a network pivot. This issue is fixed in version 1.13.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| langgenius | dify | < 1.13.0 | - |
|
II. Public POCs for CVE-2026-105762
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-105762
请登录查看更多情报信息。
Other References for CVE-2026-105762 (3)
-
https://github.com/langgenius/dify/pull/32236 x_refsource_MISC
-
https://github.com/langgenius/dify/security/advisories/GHSA-8235-vv5j-mmvg x_refsource_CONFIRM
IV. Related Vulnerabilities
Same product: dify
-
CVE-2026-105761
Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification -
CVE-2026-85022
langgenius dify WebApp Sign-In mail-and-password-auth.tsx ro -
CVE-2026-85021
langgenius dify Splash Layout splash.tsx router.replace cros -
CVE-2026-18632
langgenius dify Jinja2 jinja2_transformer.py jinja2.Template -
CVE-2026-18266
Dify AI Workflow oauth_redirect_url Open Redirect Vulnerabil
Same vendor: langgenius
-
CVE-2026-105761
Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification -
CVE-2026-85022
langgenius dify WebApp Sign-In mail-and-password-auth.tsx ro -
CVE-2026-85021
langgenius dify Splash Layout splash.tsx router.replace cros -
CVE-2026-18632
langgenius dify Jinja2 jinja2_transformer.py jinja2.Template -
CVE-2026-18266
Dify AI Workflow oauth_redirect_url Open Redirect Vulnerabil
Same weakness: CWE-918
-
CVE-2026-103546
Improper validation of Ops Manager configuration in MongoDB -
CVE-2026-105438
O2OA General url ActionUploadExcelWithUrl server-side reques -
CVE-2026-105689
Penpot: SSRF guard bypass via IPv6 transition addresses (NAT -
CVE-2026-105682
Ghost: Server-Side Request Forgery in Webhook Trigger -
CVE-2026-105636
Plane: SSRF via HTTP redirect in webhook delivery (allow_red
V. Comments for CVE-2026-105762
No comments yet