Dify: Server-side request forgery (CVE-2026-58141)

Dify versions prior to 1.15.0 contain a server-side request forgery (SSRF) vulnerability that permits authenticated console users to bypass security protections. The vulnerability stems from a Squid proxy configuration that lacks destination deny rules and a make_request() helper function that fails to perform independent destination IP validation.

Impact

Authenticated attackers can reach internal infrastructure, including sandbox environments, internal APIs, and PostgreSQL databases. On AWS deployments, attackers may leverage this flaw to access the instance metadata service to retrieve IAM credentials. The HTTP Request workflow node further enables unauthorized POST, PUT, and DELETE operations against internal services that rely on network isolation for authorization.

Recommendation

• Upgrade Dify to version 1.15.0 or later immediately to apply the patch for CVE-2026-58141.
• Audit application logs for abnormal outbound requests originating from the Dify backend.
• Implement stricter network segmentation (egress filtering) for the Dify environment to prevent internal network scanning and unauthorized access to cloud metadata services.