5
CVEs
0
Critical
1
High
0
KEV
4
PoC
0
Unpatched C/H
20.0%
Patch Rate
0.3%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
1
MEDIUM
1
LOW
3
Monthly CVE Trend
Affected Products (7)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-61461 | SQL injection in Dify's MyScale vector store backend (versions before 1.16.0-rc1) lets authenticated attackers execute arbitrary SQL against the underlying ClickHouse database by passing unsanitized search parameters into the search_by_full_text method. Because those parameters are concatenated into the query without escaping or parameterization, an attacker can read, modify, or delete stored vector-store data. Publicly available exploit code exists (VulnCheck advisory and GitHub issue #38281) and a vendor patch is available; there is no confirmation of active in-the-wild exploitation. | HIGH | 8.7 | 0.4% | 64 |
PoC
|
| CVE-2026-18632 | Server-side template injection (SSTI) in Dify's Jinja2 Handler (versions ≤1.14.2) allows remote, low-privileged authenticated attackers to inject malicious Jinja2 template expressions through the code execution subsystem, resulting in information disclosure and potential further impact. A public proof-of-concept exploit is available on GitHub, materially lowering the bar for exploitation. The vendor did not respond to responsible disclosure, meaning no patch has been released and no official mitigation guidance exists. | LOW | 2.1 | 0.4% | 31 |
PoC
No patch
|
| CVE-2026-85021 | Cross-site scripting in Dify 1.13.0 allows unauthenticated remote attackers to inject arbitrary client-side script via the redirect_url argument processed by the router.replace function in the Splash Layout component. Exploitation requires a single user interaction - the victim must follow a crafted link - but no account or prior access to the Dify instance is required. A public proof-of-concept exploit was disclosed on GitHub Gist on or around 2026-07-05; the vendor did not respond to the coordinated disclosure, and no confirmed patch is available at time of analysis. | LOW | 2.1 | 0.4% | 31 |
PoC
No patch
|
| CVE-2026-85022 | Cross-site scripting in Dify 1.13.0's WebApp Sign-In component allows remote attackers to inject malicious JavaScript by manipulating the redirect_url parameter consumed by the router.replace() function. The attack requires passive victim interaction with a crafted sign-in URL and low attacker privileges, limiting the immediate impact to integrity modification within the browser context. A public proof-of-concept exploit exists, and the vendor did not respond to coordinated disclosure, leaving no official patch available at time of analysis. | LOW | 2.0 | 0.3% | 30 |
PoC
No patch
|
| CVE-2026-18266 | Open redirect in Dify's OAuth flow enables remote attackers to hijack post-authentication redirections, sending users to attacker-controlled sites that can harvest OAuth tokens or credentials. The flaw resides in the AppInitializer component's oauth_redirect_url handling, where the redirect destination is not validated against an allowlist. Exploitation requires user interaction - a target must follow a crafted link - but no authentication is required of the attacker, making phishing-based delivery straightforward. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis. | MEDIUM | 5.4 | 0.2% | 27 |
No patch
|