A vulnerability in langgenius/dify v0.10.1 allows an attacker to take over any account, including administrator accounts, by exploiting a weak pseudo-random number generator (PRNG) used for generating password reset codes. The application uses `random.randint` for this purpose, which is not suitable for cryptographic use and can be cracked. An attacker with access to workflow tools can extract the PRNG output and predict future password reset codes, leading to a complete compromise of the application.
References
| Link | Resource |
|---|---|
| https://huntr.com/bounties/a60f3039-5394-4e22-8de7-a7da9c6a6e00 | Exploit Third Party Advisory |
Configurations
History
16 Jul 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://huntr.com/bounties/a60f3039-5394-4e22-8de7-a7da9c6a6e00 - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| First Time |
Langgenius dify
Langgenius |
|
| CPE | cpe:2.3:a:langgenius:dify:0.10.1:*:*:*:*:node.js:*:* |
20 Mar 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-20 10:15
Updated : 2025-07-16 15:15
NVD link : CVE-2025-1796
Mitre link : CVE-2025-1796
JSON object : View
Products Affected
langgenius
- dify
CWE
CWE-338
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)