{"id":"CVE-2025-63387","aliases":["EUVD-2025-204368","GHSA-hrf9-jmwr-6222","PYSEC-2025-103"],"status":"disputed","title":"Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send...","description":"Dify 1.9.1 and 1.17.0 exposes the /console/api/system-features endpoint to unauthenticated HTTP GET requests that return system feature and configuration information. NOTE: The maintainer states that the endpoint is unauthenticated by design and serves as a bootstrap mechanism required for the dashboard initialization. They also state that the data is non-sensitive and required for client-side rendering. No PII, credentials, or secrets are exposed.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.18712,"percentile":0.97309,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284","CWE-669"],"published":"2025-12-18T00:00:00Z","modified":"2026-11-04T02:31:08Z","exploits":[{"source":"nuclei","id":"CVE-2025-63387","title":"Dify v1.9.1 - Broken Access Control","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-63387.yaml"}],"affected":[{"source":"osv","ecosystem":"PyPI","package":"dify-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.9.1"}]}],"versions":["0.1.10","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.1.8"]}],"products":[{"vendor":"dify","product":"dify"},{"vendor":"langgenius","product":"dify"}],"references":[{"url":"https://github.com/langgenius/dify/discussions","tags":["Issue Tracking","web","report"]},{"url":"https://gist.github.com/Cristliu/cddc0cbbf354de51106ab63a11be94af","tags":["Third Party Advisory","web","advisory"]},{"url":"https://gist.github.com/Cristliu/dfc5f3a31dc6d7fff2754867e5c649a5","tags":["web"]},{"url":"https://github.com/langgenius/dify/issues/31368#issuecomment-3783712203","tags":["report"]},{"url":"https://github.com/langgenius/dify/pull/31417","tags":["fix"]},{"url":"https://github.com/langgenius/dify/pull/31392","tags":["fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-63387","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hrf9-jmwr-6222"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/63xxx/CVE-2025-63387.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-63387","description":"Dify 1.9.1 and 1.17.0 exposes the /console/api/system-features endpoint to unauthenticated HTTP GET requests that return system feature and configuration information. NOTE: The maintainer states that the endpoint is unauthenticated by design and serves as a bootstrap mechanism required for the dashboard initialization. They also state that the data is non-sensitive and required for client-side rendering. No PII, credentials, or secrets are exposed.","status":"disputed","published":"2025-12-18T00:00:00Z","modified":"2026-11-02T15:41:51.494Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-669","CWE-284"],"updated_at":"2026-11-02T18:00:08.034842Z"}],"euvd":[{"id":"EUVD-2025-204368","description":"Dify 1.9.1 and 1.17.0 exposes the /console/api/system-features endpoint to unauthenticated HTTP GET requests that return system feature and configuration information. NOTE: The maintainer states that the endpoint is unauthenticated by design and serves as a bootstrap mechanism required for the dashboard initialization. They also state that the data is non-sensitive and required for client-side rendering. No PII, credentials, or secrets are exposed.","status":"published","published":"2025-12-18T00:00:00Z","modified":"2026-11-02T15:41:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-03T05:08:40.757493Z"}],"ghsa":[{"id":"GHSA-hrf9-jmwr-6222","title":"Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send...","description":"Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to the /console/api/system-features endpoint without any authentication credentials or session tokens. The endpoint fails to implement proper authorization checks, allowing anonymous access to sensitive system configuration data.","status":"published","published":"2025-12-18T21:31:42Z","modified":"2026-01-22T21:34:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:05:51.858942Z"}],"nvd":[{"id":"CVE-2025-63387","description":"Dify 1.9.1 and 1.17.0 exposes the /console/api/system-features endpoint to unauthenticated HTTP GET requests that return system feature and configuration information. NOTE: The maintainer states that the endpoint is unauthenticated by design and serves as a bootstrap mechanism required for the dashboard initialization. They also state that the data is non-sensitive and required for client-side rendering. No PII, credentials, or secrets are exposed.","status":"disputed","published":"2025-12-18T19:16:33.157Z","modified":"2026-11-02T16:17:19.95Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-669","CWE-284"],"updated_at":"2026-11-02T20:51:29.978497Z"}],"osv":[{"id":"CVE-2025-63387","description":"Dify 1.9.1 and 1.17.0 exposes the /console/api/system-features endpoint to unauthenticated HTTP GET requests that return system feature and configuration information. NOTE: The maintainer states that the endpoint is unauthenticated by design and serves as a bootstrap mechanism required for the dashboard initialization. They also state that the data is non-sensitive and required for client-side rendering. No PII, credentials, or secrets are exposed.","status":"published","published":"2025-12-18T00:00:00Z","modified":"2026-11-04T02:31:08.593581515Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-669"],"updated_at":"2026-11-04T02:54:44.889498Z"},{"id":"PYSEC-2025-103","description":"Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to the /console/api/system-features endpoint without any authentication credentials or session tokens. The endpoint fails to implement proper authorization checks, allowing anonymous access to sensitive system configuration data. NOTE: The maintainer states that the endpoint is unauthenticated by design and serves as a bootstrap mechanism required for the dashboard initialization. They also state that the description inaccurately classifies the returned data as sensitive system configuration, stating that the data is non-sensitive and required for client-side rendering. No PII, credentials, or secrets are exposed.","status":"published","published":"2025-12-18T19:16:33.157Z","modified":"2026-05-21T15:00:11.940055124Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:54.242332Z"}]}}