PT-2025-28153 · Langgenius · Dify

Published 2025-03-19 · Updated 2025-08-01 · CVE-2025-3466

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: langgenius/dify versions 1.1.0 through 1.1.2

Description: The issue arises from unsanitized input in the code node, allowing execution of arbitrary code with full root permissions. This is due to the ability to override global functions in JavaScript, such as parseInt, before sandbox security restrictions are imposed. This can lead to unauthorized access to secret keys, internal network servers, and lateral movement within dify.ai.

Recommendations: For versions 1.1.0 through 1.1.2, update to version 1.1.3 to resolve the issue. As a temporary workaround, consider restricting access to the code node to minimize the risk of exploitation. Avoid using overridden global functions in JavaScript, such as parseInt, until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-1100

Related Identifiers

BDU:2026-00211

CVE-2025-3466

Affected Products

Dify

References · 9

• 🔥 https://huntr.com/bounties/f8dc17a3-5536-4944-a680-24070903cd2d · Exploit
• https://github.com/langgenius/dify/commit/1be0d26c1feb4bcbbdd2b4ae4eeb25874aadaddb · Patch
• https://bdu.fstec.ru/vul/2026-00211 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-3466 · Security Note
• https://osv.dev/vulnerability/CVE-2025-3466 · Vendor Advisory
• https://twitter.com/DavidMarquet19/status/1951318135795011939 · Twitter Post
• https://twitter.com/cybercronai/status/1942283183795417539 · Twitter Post
• https://twitter.com/CveFindCom/status/1942164145559736528 · Twitter Post
• https://twitter.com/CVEnew/status/1942166382184931486 · Twitter Post