CVE-2026-105762 | CVSS: 8.3 | 严重级别: HIGH
Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remote_files.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint to send requests to internal services or cloud metadata endpoints, potentially exposing sensitive data and using the server as a network pivot. This issue is fixed in version 1.13.0.
参考链接:
• https://github.com/langgenius/dify/commit/2f87ecc0ce1d05ab3ef9537f29b84a5fa58230
• https://github.com/langgenius/dify/pull/32236
• https://github.com/langgenius/dify/releases/tag/1.13.0
📌 数据来源: NVD 官方
⚠️ 合规声明: 本文内容仅用于网络安全合规学习、科研与授权测试用途。严禁用于任何未授权行为,违者自行承担全部法律责任。