CVE-2024-10252 Code Injection in langgenius/dify

What is CVE-2024-10252?

CVE-2024-10252 is a high-severity code injection vulnerability in langgenius/dify, published on 20 Mar 2025. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A vulnerability in langgenius/dify versions <=v0.9.1 allows for code injection via internal SSRF requests in the Dify sandbox service. This vulnerability enables an attacker to execute arbitrary Python code with root privileges within the sandbox environment, potentially leading to the deletion of the entire sandbox service and causing irreversible damage.

Weakness: CWE-94

Which versions are affected by CVE-2024-10252?

It affects 1 product.

Products include Langgenius Dify.

How do I fix CVE-2024-10252?

No fix has been published for CVE-2024-10252 yet. Limit exposure of the affected software until one is available.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2024-10252 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-10252 exists.

Other vulnerabilities in langgenius/dify

• CVE-2025-56157 Hardcoded credentials in n/a Critical 9.8
• CVE-2025-3466 Unsanitized Input in langgenius/dify Critical 9.8
• CVE-2025-63386 Misconfiguration in n/a Critical 9.1
• CVE-2025-63388 Misconfiguration in n/a Critical 9.1
• CVE-2024-12776 Authentication Bypass in langgenius/dify High 8.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-gvmg-6fvg-2jp2.