Server-Side Request Forgery Vulnerability in Dify by LangGenius

CVE-2026-58141

What is CVE-2026-58141?

Dify prior to version 1.15.0 is vulnerable to a server-side request forgery issue. This allows authenticated console users to circumvent existing SSRF protections, enabling them to issue arbitrary HTTP requests to internal services and cloud metadata endpoints. The vulnerability arises due to a misconfiguration in the Squid proxy, where source access control lists (ACLs) are defined without proper destination deny rules, alongside the make_request() helper which fails to perform destination IP validation. Attackers can exploit this vulnerability through various endpoints, potentially accessing sensitive internal components like the sandbox, internal APIs, and PostgreSQL databases, and on AWS deployments, they can retrieve IAM credentials via instance metadata service. This flaw also permits HTTP Request workflows to conduct POST, PUT, and DELETE operations on internal services, undermining network isolation used for authorization.

References