CVE-2024-12775 SSRF in langgenius/dify

Medium 6.5 Published 20 Mar 2025 Updated 20 Mar 2025

Attackers can exploit an SSRF vulnerability in Dify's custom tool testing to access unauthorized internal resources using server credentials.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-12775?

CVE-2024-12775 is a medium-severity server-side request forgery vulnerability in langgenius/dify, published on 20 Mar 2025. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

langgenius/dify version 0.10.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the test functionality for the Create Custom Tool option via the REST API `POST /console/api/workspaces/current/tool-provider/api/test/pre`. Attackers can set the `url` in the `servers` dictionary in OpenAI's schema with arbitrary URL targets, allowing them to abuse the victim server's credentials to access unauthorized web resources.

Weakness: CWE-918

Which versions are affected by CVE-2024-12775?

It affects 1 product.

Products include Langgenius Dify.

How do I fix CVE-2024-12775?

No fix has been published for CVE-2024-12775 yet. Limit exposure of the affected software until one is available.

Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.

Is CVE-2024-12775 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-12775 exists.

Sources

Also known as GHSA-p926-8677-385w.