CVE-2025-3466
High
Description
langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with full root permissions. The vulnerability arises from the ability to override global functions in JavaScript, such as parseInt, before sandbox security restrictions are imposed. This can lead to unauthorized access to secret keys, internal network servers, and lateral movement within dify.ai. The issue is resolved in version 1.1.3.
SeverityHigh
CVSS7.2
Exploit probability—
ProductLanggenius Dify
PublishedJul 7, 2025
First seenJul 7, 2025
Weakness typeCWE-1100CWE-1100
How to fix
Update
- langgenius dify1.1.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| langgenius dify | 1.1.0 ≤ v < 1.1.3 | 1.1.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.