CVE-2026-6618

MEDIUM

langgenius dify ApiBasedToolSchemaParser parser.py parse_openai_plugin_json_to_tool_bundle server-side request forgery

Title source: cna

Description

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse_openai_plugin_json_to_tool_bundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (4)

Core 4

Core References

Vdb Entry, Technical Description vdb-entry technical-description

VDB-358253 | langgenius dify ApiBasedToolSchemaParser parser.py parse_openai_plugin_json_to_tool_bundle server-side request forgery

https://vuldb.com/vuln/358253

Signature, Permissions Required signature permissions-required

VDB-358253 | CTI Indicators (IOB, IOC, IOA)

https://vuldb.com/vuln/358253/cti

Third Party Advisory third-party-advisory

Submit #792241 | LangGenius Dify <= v1.13.3 Server-Side Request Forgery (CWE-918)

https://vuldb.com/submit/792241

Exploit exploit

https://gist.github.com/chenhouser2025/d7b1c574b0e32eb9169f7046b486e662

Scores

CVSS v3 6.3

EPSS 0.0021

EPSS Percentile 10.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-918

Status published

Products (4)

langgenius/dify 1.13.0

langgenius/dify 1.13.1

langgenius/dify 1.13.2

langgenius/dify 1.13.3

Published Apr 20, 2026

Tracked Since Apr 20, 2026