CVE-2026-105761

Received Received - Intake

Authentication Bypass in Dify LLM Platform

Publication date: 2026-10-05

Last updated on: 2026-10-05

Assigner: GitHub, Inc.

Description

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server endpoint in api/controllers/console/app/mcp_server.py used AppMCPServerController.put() to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged to the requested application and tenant. An authenticated workspace member could therefore change another application's MCP server status and parameters, potentially redirecting data or disabling the service. This issue is fixed in version 1.16.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-05

Last Modified

2026-10-05

Generated

2026-10-06

AI Q&A

2026-10-06

EPSS Evaluated

N/A

NVD

CVE-2026-105761

Affected Vendors & Products

Vendor	Product	Version / Range
langgenius	dify	< 1.16.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

This vulnerability affects Dify, an open-source LLM app development platform. It allows authenticated workspace members to modify another application's MCP server settings without proper authorization. The issue occurs in the PUT endpoint for server configuration, where the server ID is not validated against the application and tenant, enabling unauthorized changes.

Detection Guidance

This vulnerability affects Dify versions prior to 1.16.0. To detect it, check the installed version of Dify using commands like 'pip show dify' or 'dify version'. If the version is below 1.16.0, the system is vulnerable.

Impact Analysis

An attacker with workspace access could redirect data from one application to another, disable services, or alter server parameters. This could lead to data leaks, service disruptions, or unauthorized access to sensitive information depending on the application's use case.

Compliance Impact

This vulnerability could violate compliance requirements by enabling unauthorized access or data manipulation. GDPR requires protecting personal data integrity, while HIPAA mandates secure handling of health information. Unauthorized changes could lead to data breaches or integrity violations, risking non-compliance.

Mitigation Strategies

Upgrade Dify to version 1.16.0 or later to address the vulnerability. Ensure all applications and tenants are properly configured to prevent unauthorized access to MCP server settings.

Hi! I’m here to help you understand CVE-2026-105761. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70