CVE-2025-59422

Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /console/api/apps/<APP_ID>chat-messages?conversation_id=<CONVERSATION_ID>&limit=10 endpoint allows users in the same workspace to read chat messages of other users. A regular user is able to read the query data and the filename of the admins and probably other users chats, if they know the conversation_id. This impacts the confidentiality of chats. This issue has been patched in version 1.9.0.

CVSS v3 3.1 LOW

3.1^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.6 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/langgenius/dify/commit/b2d8a7eaf1693841411934e2056042845ab4f354	Patch
https://github.com/langgenius/dify/security/advisories/GHSA-jg5j-c9pq-w894	Exploit Vendor Advisory
https://github.com/langgenius/dify/security/advisories/GHSA-jg5j-c9pq-w894	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:langgenius:dify:1.8.1:*:*:*:*:node.js:*:*

History

11 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Dify es una plataforma de desarrollo de aplicaciones LLM de código abierto. En la versión 1.8.1, una vulnerabilidad de control de acceso roto en el endpoint /console/api/apps/<APP_ID>chat-messages?conversation_id=<CONVERSATION_ID>&limit=10 permite a los usuarios del mismo espacio de trabajo leer los mensajes de chat de otros usuarios. Un usuario regular puede leer los datos de la consulta y el nombre de archivo de los chats de los administradores y probablemente de otros usuarios, si conocen el conversation_id. Esto afecta la confidencialidad de los chats. Este problema ha sido parcheado en la versión 1.9.0.

Information

Published : 2025-09-25 14:15

Updated : 2026-10-11 20:10

NVD link : CVE-2025-59422

Mitre link : CVE-2025-59422

CVE.ORG link : CVE-2025-59422

JSON object : View

Products Affected

langgenius

dify

CWE

CWE-284

Improper Access Control

{"id": "CVE-2025-59422", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-59422", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-25T15:14:35.357290Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.1, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.6}], "cvssMetricV40": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.0, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "langgenius", "product": "dify", "versions": [{"status": "affected", "version": "= 1.8.1"}]}]}], "published": "2025-09-25T14:15:45.677", "references": [{"url": "https://github.com/langgenius/dify/commit/b2d8a7eaf1693841411934e2056042845ab4f354", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/langgenius/dify/security/advisories/GHSA-jg5j-c9pq-w894", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/langgenius/dify/security/advisories/GHSA-jg5j-c9pq-w894", "tags": ["Exploit", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /console/api/apps/<APP_ID>chat-messages?conversation_id=<CONVERSATION_ID>&limit=10 endpoint allows users in the same workspace to read chat messages of other users. A regular user is able to read the query data and the filename of the admins and probably other users chats, if they know the conversation_id. This impacts the confidentiality of chats. This issue has been patched in version 1.9.0."}, {"lang": "es", "value": "Dify es una plataforma de desarrollo de aplicaciones LLM de c\u00f3digo abierto. En la versi\u00f3n 1.8.1, una vulnerabilidad de control de acceso roto en el endpoint /console/api/apps/<APP_ID>chat-messages?conversation_id=<CONVERSATION_ID>&limit=10 permite a los usuarios del mismo espacio de trabajo leer los mensajes de chat de otros usuarios. Un usuario regular puede leer los datos de la consulta y el nombre de archivo de los chats de los administradores y probablemente de otros usuarios, si conocen el conversation_id. Esto afecta la confidencialidad de los chats. Este problema ha sido parcheado en la versi\u00f3n 1.9.0."}], "lastModified": "2026-10-11T20:10:00.200", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:langgenius:dify:1.8.1:*:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "8838A326-6AAA-45C7-B074-C0F842CC535E"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}