CVE-2026-105761

Published: Oct 5, 2026Modified: Oct 6, 2026Deferred

7.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Exploitability: 2.8 / Impact: 4.2

Source: security-advisories@github.com (Secondary)

Description

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server endpoint in api/controllers/console/app/mcp_server.py used AppMCPServerController.put() to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged to the requested application and tenant. An authenticated workspace member could therefore change another application's MCP server status and parameters, potentially redirecting data or disabling the service. This issue is fixed in version 1.16.0.

Related CWEs

CWE-639

Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (4)

https://github.com/langgenius/dify/commit/62cb5b586504b730731e28e743c038b72950058e

Source: security-advisories@github.com

https://github.com/langgenius/dify/pull/38177

Source: security-advisories@github.com

https://github.com/langgenius/dify/releases/tag/1.16.0

Source: security-advisories@github.com

https://github.com/langgenius/dify/security/advisories/GHSA-ccrj-frp2-c945

Source: security-advisories@github.com

Timeline

No history available yet.