CVE-2026-61461 Dify < 1.16.0-rc1 SQL Injection via MyScale Vector Store search_by_full_text

What is CVE-2026-61461?

CVE-2026-61461 is a high-severity SQL injection vulnerability in langgenius dify, published on 10 Jul 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Dify before 1.16.0-rc1 contains a SQL injection vulnerability in the MyScale vector store backend that allows attackers to execute arbitrary SQL by supplying unsanitized search parameters to the search_by_full_text method without escaping or parameterization. Attackers can inject malicious SQL through the search parameters to read, modify, or delete data in the underlying ClickHouse database.

Weakness: CWE-89

Which versions are affected by CVE-2026-61461?

It affects 1 product.

Products include Dify Dify.

How do I fix CVE-2026-61461?

No fix has been published for CVE-2026-61461 yet. Limit exposure of the affected software until one is available.

Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.

Is CVE-2026-61461 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-61461 exists.

Other vulnerabilities in langgenius dify

• CVE-2026-41947 Dify < 1.14.2 Authorization Bypass via Trace Configuration Endpoints Critical 9.3
• CVE-2026-41948 Dify v1.14.1 Path Traversal via Plugin Daemon Internal API Access Critical 9.3
• CVE-2025-0185 Pandas Query Injection in langgenius/dify High 8.8
• CVE-2025-67732 Dify Vulnerable to Plaintext API Key Exposure via Model Provider Configuration Endpoint High 8.4
• CVE-2026-41949 Dify < 1.14.2 Authorization Bypass via File Preview Endpoint High 8.2

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-hw83-q5rh-7hgf.