CVE-2026-58141

Dify remote file ingestion bypasses outbound request restrictions

LangGenius · Dify remote file ingestion

First documented disclosure · Review checkpoint

Summary

Console users can bypass outbound request restrictions.

Severity and exploitation evidence

High · 7.2/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed public sources describe the vulnerability and its conditions. Malicious exploitation has not been established in the reviewed sources.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Remote-file handling did not consistently apply the configured outbound proxy policy.

Conditions required

An authenticated console user must be able to request a remote file.

Potential impact

The server can access private resources and expose data or affect services that rely on network isolation.

Affected versions and configurations

0.6.0 to before 1.15.0.

Fix and mitigation status

1.15.0.

Practical next steps

Upgrade to 1.15.0 and restrict egress from file ingestion and workflow components.

Operating lesson

Apply the same destination controls to each component that retrieves a remote file.

Evidence and limits

The dated public project record and the later CVE describe the same affected component. The fixed version is identified by the project or assigning authority.

Sources