CVE-2026-123135 Details
Description
A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2. Affected by this vulnerability is an unknown functionality of the file api/configs/feature/__init__.py of the component Sandbox Run Handler. The manipulation results in hard-coded credentials. The attack can be launched remotely. The exploit has been made public and could be used.
A vulnerability exists in Langgenius Dify versions up to 1.18.0 and 2.0.0-beta.2, where the code-execution sandbox container uses a hard-coded default API key, 'dify-sandbox', for authentication. This key is publicly known and easily guessable, allowing external attackers to execute arbitrary Python or JavaScript code within the sandbox. The vulnerability arises because the default key is active in the '.env.example' file, which, when copied to '.env', retains the weak credential. The issue is exacerbated in the 'docker-compose.middleware.yaml' deployment, which exposes the sandbox API key authentication flaw by mapping host port 8194 to the sandbox, making it accessible from outside the container.
To address this vulnerability, the default 'dify-sandbox' API key should be removed from the '.env.example' file, and the sandbox should be configured to require a unique, operator-chosen API key. Additionally, the 'docker-compose.middleware.yaml' file should be updated to not expose the sandbox port by default, requiring explicit permission to do so.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/langgenius/dify/ | [email protected] | ProductVendor |
| https://github.com/langgenius/dify/issues/44054 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/langgenius/dify/pull/44192 | [email protected] | Issue TrackingVendor |
| https://github.com/ybyu-ieu/agent-security-advisories/blob/main/dify/dify-sandbox-hardcoded-default-api-key.md | [email protected] | AdvisoryExploitRemedy |
| https://vuldb.com/cve/CVE-2026-123135 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1033133 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/431443 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/431443/cti | [email protected] | AdvisoryContent Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-259 | Use of Hard-coded Password | [email protected] |
| CWE-798 | Use of Hard-coded Credentials | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| langgenius Dify | <= 1.18.0 (semver) <= 2.0.0-beta.2 (semver) |
CPE
Remediation
| |
| langgenius Dify Sandbox | All versions |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 5, 2026 | New CVE Received | [email protected] |