Langgenius Dify Arbitrary Code Execution Vulnerability in Versions 1.1.0 to 1.1.2

A vulnerability allowing arbitrary code execution with root privileges has been identified in Langgenius Dify, specifically in versions 1.1.0 through 1.1.2. This issue stems from unsanitized input in the code node, which enables the execution of malicious code by overriding global JavaScript functions, such as parseInt, before sandbox security measures take effect. Exploitation of this vulnerability could result in unauthorized access to secret keys, internal network servers, and facilitate lateral movement within the Dify.ai platform.

Impact

Exploitation of this vulnerability allows for arbitrary code execution with root privileges.

Reproduction

The vulnerability can be reproduced by inputting unsanitized data into the code node, which will then be executed with full root permissions. This can be done by crafting input that overrides global JavaScript functions before the sandbox applies its security restrictions.

Remediation

Users are advised to update to Dify version 1.1.3, where this vulnerability has been addressed.