CVE-2025-58747
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-17

Last updated on: 2025-10-29

Assigner: GitHub, Inc.

Description
Dify is an LLM application development platform. In Dify versions through 1.9.1, the MCP OAuth component is vulnerable to cross-site scripting when a victim connects to an attacker-controlled remote MCP server. The vulnerability exists in the OAuth flow implementation where the authorization_url provided by a remote MCP server is directly passed to window.open without validation or sanitization. An attacker can craft a malicious MCP server that returns a JavaScript URI (such as javascript:alert(1)) in the authorization_url field, which is then executed when the victim attempts to connect to the MCP server. This allows the attacker to execute arbitrary JavaScript in the context of the Dify application.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-17
Last Modified
2025-10-29
Generated
2026-06-16
AI Q&A
2025-10-17
EPSS Evaluated
2026-06-15
NVD
CVE-2025-58747
EUVD
EUVD-2025-34897
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
langgenius dify to 1.9.2 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability in Dify versions through 1.9.1 involves the MCP OAuth component where an attacker-controlled remote MCP server can supply a malicious authorization_url. Because this URL is passed directly to window.open without validation or sanitization, an attacker can craft a JavaScript URI that executes arbitrary JavaScript code in the context of the Dify application when a victim connects to the malicious MCP server.

Impact Analysis

The vulnerability allows an attacker to execute arbitrary JavaScript code within the Dify application context. This can lead to potential security risks such as unauthorized actions, data theft, or manipulation of the application behavior when a user connects to a malicious MCP server.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-58747. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart