UpHeron
All vulnerabilities

Servers and applications

CVE-2026-123135

langgenius dify Sandbox Run __init__.py hard-coded credentials

Severity
Medium 5.3
Published
5 Nov 2026
Last changed
5 Nov 2026
Added to UpHeron
5 Nov 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
DifyServers and applications · cna:langgenius|dify
  • Version 2.0.0-beta.2
  • Version 2.0.0-beta.1
  • Version 2.0.0-beta.0
  • Version 1.18.0
All 22 release lines
  • Version 1.0
  • Version 1.1
  • Version 1.2
  • Version 1.3
  • Version 1.4
  • Version 1.5
  • Version 1.6
  • Version 1.7
  • Version 1.8
  • Version 1.9
  • Version 1.10
  • Version 1.11
  • Version 1.12
  • Version 1.13
  • Version 1.14
  • Version 1.15
  • Version 1.16
  • Version 1.17
  • Version 1.18.0
  • Version 2.0.0-beta.0
  • Version 2.0.0-beta.1
  • Version 2.0.0-beta.2
DifyServers and applications · cpe:a:langgenius:dify
  • Version 2.0.0-beta.2
  • Version 2.0.0-beta.1
  • Version 2.0.0-beta.0
  • Version 1.18.0
All 22 release lines
  • Version 1.0
  • Version 1.1
  • Version 1.2
  • Version 1.3
  • Version 1.4
  • Version 1.5
  • Version 1.6
  • Version 1.7
  • Version 1.8
  • Version 1.9
  • Version 1.10
  • Version 1.11
  • Version 1.12
  • Version 1.13
  • Version 1.14
  • Version 1.15
  • Version 1.16
  • Version 1.17
  • Version 1.18.0
  • Version 2.0.0-beta.0
  • Version 2.0.0-beta.1
  • Version 2.0.0-beta.2

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-123135