CVE-2026-123135 in dify
Zusammenfassung
von MITRE • 05.11.2026
A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2. Affected by this vulnerability is an unknown functionality of the file api/configs/feature/__init__.py of the component Sandbox Run Handler. The manipulation results in hard-coded credentials. The attack can be launched remotely. The exploit has been made public and could be used.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.