CVE-2026-123135 in dify
Prediction
by VulDB Data Team • 11/05/2026
A vulnerability was found in <a href="/product/langgenius:dify">langgenius dify up to 1.18.0/2.0.0-beta.2</a>. Affected by this vulnerability is an unknown functionality of the file <em>api/configs/feature/__init__.py</em> of the component <em>Sandbox Run Handler</em>. The manipulation results in hard-coded credentials. The attack can be launched remotely. The exploit has been made public and could be used.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.