PT-2025-12322 · Unknown · Langgenius/Dify

Published 2025-03-20 · Updated 2025-07-16 · CVE-2025-1796

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions langgenius/dify version 0.10.1

Description A weakness in the pseudo-random number generator (PRNG) used for generating password reset codes allows an attacker to take over any account, including administrator accounts. The application utilizes random.randint for this purpose, which is not suitable for cryptographic use and can be cracked. An attacker with access to workflow tools can extract the PRNG output and predict future password reset codes, leading to a complete compromise of the application.

Recommendations For version 0.10.1, consider disabling the password reset functionality until a patch is available that addresses the weak PRNG issue. Restrict access to workflow tools to minimize the risk of exploitation. Avoid using the random.randint function for cryptographic purposes, such as generating password reset codes, until a secure alternative is implemented.

Exploit

Fix

Weakness Enumeration

CWE-338

Related Identifiers

CVE-2025-1796

Affected Products

Langgenius/Dify

References · 7

• 🔥 https://huntr.com/bounties/a60f3039-5394-4e22-8de7-a7da9c6a6e00 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-1796 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1796 · Vendor Advisory
• https://t.me/cvedetector/20707 · Telegram Post
• https://t.me/cvenotify/129184 · Telegram Post
• https://t.me/cvetracker/19530 · Telegram Post
• https://twitter.com/CVEnew/status/1903336856550269003 · Twitter Post