原文の説明
Dify before 1.15.0 contains a server-side request forgery vulnerability that allows any authenticated console user to bypass SSRF protections and issue arbitrary HTTP requests to internal services and cloud metadata endpoints due to the Squid proxy configuration only defining source ACLs without destination deny rules and the make_request() helper performing no independent destination IP validation. Attackers can use endpoints such as GET /console/api/remote-files/<url>, POST /console/api/remote-files/upload, the HTTP Request workflow node, website crawl, or document import from URL to reach internal components like the sandbox, internal APIs, and PostgreSQL, and on AWS deployments read IAM credentials from the instance metadata service, with the HTTP Request node further enabling POST, PUT, and DELETE writes to internal services relying on network isolation for authorization.
影響を受けるソフトウェア
- Dify.ai ≥ 0.6.0 < 1.15.0 修正バージョン: 1.15.0 リポジトリ・パッケージ一致
詳細
- 公開日
- 2026-11-07
- 最終更新
- 2026-11-08
- CVSS ベクター
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N- CWE
- CWE-918
参考資料
- cve.org/CVE-2026-58141
- nvd.nist.gov/vuln/detail/CVE-2026-58141
- github.com/langgenius/dify/releases/tag/1.15.0
- github.com/langgenius/dify/pull/36332
- github.com/langgenius/dify/commit/7bfcf9185c75bb18f0b44335080524e659f087d9
- www.vulncheck.com/advisories/dify-ssrf-protection-bypass-via-remote-files-endpoints
本製品は NVD API のデータを使用していますが、NVD による承認または認定を受けたものではありません。CVE® は The MITRE Corporation の登録商標です。CVE レコードは CVE Program の利用規約に基づいて使用しています。