Dify SSRF protection bypass via remote-file endpoints
Internal systems of an AI app builder can be peeked into.
Summary
In Dify before 1.15.0, any logged-in console user can bypass SSRF protections and send arbitrary HTTP requests to internal services and cloud metadata endpoints. On AWS deployments, IAM credentials can also be read.
Affected when
- Any logged-in console user account
- AWS deployment (IAM credential read)
What to do
Update to Dify 1.15.0 or newer.
Products and platforms
CVE IDs
Sources
- Advisory: github.com (opens in a new tab)
- Write-up: vulncheck.com (opens in a new tab)
Times
First published
First seen