---
id: CVE-2026-123135
title: langgenius dify Sandbox Run __init__.py hard-coded credentials
summary: >-
  A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2.
  Affected by this vulnerability is an unknown functionality of the file
  api/configs/feature/__init__.py of the component Sandbox Run Handler. The
  manipulation results…
severity: medium
cvss: 6.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-798
  - CWE-259
vendor: langgenius
product: dify
affected:
  - dify 1.0
  - dify 1.1
  - dify 1.2
  - dify 1.3
  - dify 1.4
  - dify 1.5
  - dify 1.6
  - dify 1.7
  - dify 1.8
  - dify 1.9
  - dify 1.10
  - dify 1.11
  - dify 1.12
  - dify 1.13
  - dify 1.14
  - dify 1.15
  - dify 1.16
  - dify 1.17
  - dify 1.18.0
  - dify 2.0.0-beta.0
  - dify 2.0.0-beta.1
  - dify 2.0.0-beta.2
published: '2026-11-05'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T18:45:12.776Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-123135'
references:
  - url: 'https://vuldb.com/vuln/431443'
    label: >-
      VDB-431443 | langgenius dify Sandbox Run __init__.py hard-coded
      credentials
  - url: 'https://vuldb.com/vuln/431443/cti'
    label: 'VDB-431443 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-123135'
    label: CVE-2026-123135 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1033133'
    label: >-
      Submit #1033133 | langgenius Dify 1.15.0 CWE-798 Use of Hard-coded
      Credentials
  - url: 'https://github.com/langgenius/dify/issues/44054'
  - url: 'https://github.com/langgenius/dify/pull/44192'
  - url: >-
      https://github.com/ybyu-ieu/agent-security-advisories/blob/main/dify/dify-sandbox-hardcoded-default-api-key.md
  - url: 'https://github.com/langgenius/dify/'
tags:
  - cve.org
ingestedAt: '2026-11-05T22:38:31.476Z'
---

## Overview

A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2. Affected by this vulnerability is an unknown functionality of the file api/configs/feature/__init__.py of the component Sandbox Run Handler. The manipulation results in hard-coded credentials. The attack can be launched remotely. The exploit has been made public and could be used.

## Affected

- `dify 1.0`
- `dify 1.1`
- `dify 1.2`
- `dify 1.3`
- `dify 1.4`
- `dify 1.5`
- `dify 1.6`
- `dify 1.7`
- `dify 1.8`
- `dify 1.9`
- `dify 1.10`
- `dify 1.11`
- `dify 1.12`
- `dify 1.13`
- `dify 1.14`
- `dify 1.15`
- `dify 1.16`
- `dify 1.17`
- `dify 1.18.0`
- `dify 2.0.0-beta.0`
- `dify 2.0.0-beta.1`
- `dify 2.0.0-beta.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.