CVE-2026-123135
EUVD-2026-11772305.11.2026, 19:17
A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2. Affected by this vulnerability is an unknown functionality of the file api/configs/feature/__init__.py of the component Sandbox Run Handler. The manipulation results in hard-coded credentials. The attack can be launched remotely. The exploit has been made public and could be used.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| langgenius | dify | 1.0 | CNA |
| langgenius | dify | 1.1 | CNA |
| langgenius | dify | 1.2 | CNA |
| langgenius | dify | 1.3 | CNA |
| langgenius | dify | 1.4 | CNA |
| langgenius | dify | 1.5 | CNA |
| langgenius | dify | 1.6 | CNA |
| langgenius | dify | 1.7 | CNA |
| langgenius | dify | 1.8 | CNA |
| langgenius | dify | 1.9 | CNA |
| langgenius | dify | 1.10 | CNA |
| langgenius | dify | 1.11 | CNA |
| langgenius | dify | 1.12 | CNA |
| langgenius | dify | 1.13 | CNA |
| langgenius | dify | 1.14 | CNA |
| langgenius | dify | 1.15 | CNA |
| langgenius | dify | 1.16 | CNA |
| langgenius | dify | 1.17 | CNA |
| langgenius | dify | 1.18.0 | CNA |
Common Weakness Enumeration
References