CVE-2026-105761

HIGH 7.1

Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP Servers

CVSS Score

7.1

EPSS Score

0.0%

EPSS Percentile

0th

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server endpoint in api/controllers/console/app/mcp_server.py used AppMCPServerController.put() to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged to the requested application and tenant. An authenticated workspace member could therefore change another application's MCP server status and parameters, potentially redirecting data or disabling the service. This issue is fixed in version 1.16.0.

CWE	CWE-639
Vendor	langgenius
Product	dify
Published	Oct 5, 2026

Stay Ahead of the Next One

Get instant alerts for langgenius dify

Be the first to know when new high vulnerabilities affecting langgenius dify are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

Low

Affected Versions

langgenius / dify

< 1.16.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/langgenius/dify/security/advisories/GHSA-ccrj-frp2-c945 github.com: https://github.com/langgenius/dify/pull/38177 github.com: https://github.com/langgenius/dify/commit/62cb5b586504b730731e28e743c038b72950058e github.com: https://github.com/langgenius/dify/releases/tag/1.16.0