Dify CVE-2026-34082

Q: What is the CVSS score of CVE-2026-34082?

CVE-2026-34082 has a CVSS 4.0 base score of 5.3 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

MEDIUM

Incorrect Authorization (CWE-863)

2026-04-20 GitHub_M

Authentication Bypass Dify

5.3

CVSS 4.0 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

5.3 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Apr 20, 2026 - 23:51 vuln.today

CVSS changed

Apr 20, 2026 - 23:22 NVD

5.3 (MEDIUM)

Analysis Generated

Apr 20, 2026 - 23:15 vuln.today

CVE Published

Apr 20, 2026 - 23:03 nvd

MEDIUM 5.3

DescriptionGitHub Advisory

Dify is an open-source LLM app development platform. Prior to 1.13.1, the method DELETE /console/api/installed-apps/<appId>/conversations/<conversationId> has poor authorization checking and allows any Dify-authenticated user to delete someone else's chat history. Version 1.13.1 patches the issue.

AnalysisAI

Dify prior to version 1.13.1 allows any authenticated user to delete other users' chat histories via the DELETE /console/api/installed-apps/<appId>/conversations/<conversationId> endpoint due to insufficient authorization checks. An authenticated attacker can target any conversation ID to perform unauthorized deletion, resulting in data loss for other users. This vulnerability requires valid Dify authentication but no special privileges, affecting all vulnerable versions via network access.

Technical ContextAI

Dify is an open-source LLM application development platform that provides conversational interfaces and chat management capabilities. The vulnerability resides in the conversation deletion endpoint, which implements authentication (PR:L in CVSS vector) but fails to perform adequate authorization checks to verify that the requesting user owns or has permission to delete the targeted conversation. CWE-863 (Incorrect Authorization) indicates the root cause is missing or improper access control logic that should validate resource ownership before allowing deletion. The affected endpoint exposes conversation resources without verifying the requester's relationship to the conversation data, allowing horizontal privilege escalation where one authenticated user can manipulate another user's data.

RemediationAI

Update Dify to version 1.13.1 or later immediately, as vendor-released patches are available in the official release at https://github.com/langgenius/dify/releases/tag/1.13.1. For organizations unable to upgrade immediately, implement network-level access controls restricting the /console/api/installed-apps endpoint to authenticated and authorized users only, and consider disabling the conversation deletion feature via application configuration if not essential to your workflow. Monitor and audit conversation deletion logs for suspicious patterns (bulk deletions, cross-user deletions) to detect exploitation attempts. Note that these compensating controls provide detection and partial mitigation but do not prevent the vulnerability itself - upgrading to 1.13.1 is the definitive fix and should be prioritized.