{"id":"CVE-2026-123135","title":"langgenius dify Sandbox Run __init__.py hard-coded credentials","summary":"A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2. Affected by this vulnerability is an unknown functionality of the file api/configs/feature/__init__.py of the component Sandbox Run Handler. The manipulation results…","severity":"medium","cvss":6.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C","cvssSource":"cna","cwe":["CWE-798","CWE-259"],"vendor":"langgenius","product":"dify","affected":["dify 1.0","dify 1.1","dify 1.2","dify 1.3","dify 1.4","dify 1.5","dify 1.6","dify 1.7","dify 1.8","dify 1.9","dify 1.10","dify 1.11","dify 1.12","dify 1.13","dify 1.14","dify 1.15","dify 1.16","dify 1.17","dify 1.18.0","dify 2.0.0-beta.0","dify 2.0.0-beta.1","dify 2.0.0-beta.2"],"published":"2026-11-05","updated":"2026-11-05","sourceUpdated":"2026-11-05T18:45:12.776Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-123135","references":[{"url":"https://vuldb.com/vuln/431443","label":"VDB-431443 | langgenius dify Sandbox Run __init__.py hard-coded credentials"},{"url":"https://vuldb.com/vuln/431443/cti","label":"VDB-431443 | CTI Indicators (IOB, IOC, TTP, IOA)"},{"url":"https://vuldb.com/cve/CVE-2026-123135","label":"CVE-2026-123135 | CVE Analysis and Report"},{"url":"https://vuldb.com/submit/1033133","label":"Submit #1033133 | langgenius Dify 1.15.0 CWE-798 Use of Hard-coded Credentials"},{"url":"https://github.com/langgenius/dify/issues/44054"},{"url":"https://github.com/langgenius/dify/pull/44192"},{"url":"https://github.com/ybyu-ieu/agent-security-advisories/blob/main/dify/dify-sandbox-hardcoded-default-api-key.md"},{"url":"https://github.com/langgenius/dify/"}],"tags":["cve.org"],"ingestedAt":"2026-11-05T22:38:31.476Z","slug":"CVE-2026-123135","body":"## Overview\n\nA vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2. Affected by this vulnerability is an unknown functionality of the file api/configs/feature/__init__.py of the component Sandbox Run Handler. The manipulation results in hard-coded credentials. The attack can be launched remotely. The exploit has been made public and could be used.\n\n## Affected\n\n- `dify 1.0`\n- `dify 1.1`\n- `dify 1.2`\n- `dify 1.3`\n- `dify 1.4`\n- `dify 1.5`\n- `dify 1.6`\n- `dify 1.7`\n- `dify 1.8`\n- `dify 1.9`\n- `dify 1.10`\n- `dify 1.11`\n- `dify 1.12`\n- `dify 1.13`\n- `dify 1.14`\n- `dify 1.15`\n- `dify 1.16`\n- `dify 1.17`\n- `dify 1.18.0`\n- `dify 2.0.0-beta.0`\n- `dify 2.0.0-beta.1`\n- `dify 2.0.0-beta.2`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":35,"depthScoreParts":{"impact":34.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}