CVE-2025-56157 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Default credentials in Dify thru 1.5.1. PostgreSQL username and password specified in the docker-compose.yaml file included in its source code. NOTE: the Suppli…
Critical CVSS: 9.8

CVE-2025-56157

Default credentials in Dify thru 1.5.1. PostgreSQL username and password specified in the docker-compose.yaml file included in its source code. NOTE: the Supplier reports that the Docker configuration does not make PostgreSQL (on TCP port 5432) exposed by default in version 1.0.1 or later.
Vendor
Langgenius
Product
Dify
CWE
CWE-798
Yayın Tarihi
2025-12-18 19:16:26
Güncelleme
2026-01-29 18:16:07
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-798 Dify CRITICAL Langgenius 2025

Referanslar

http://dify.com https://gist.github.com/Cristliu/216ddbadaf3258498c93d408683ecabd https://gist.github.com/Cristliu/298f51cbc72c45d91632cd0d65aa8161 https://github.com/langgenius/dify https://github.com/langgenius/dify/issues/15285 https://github.com/langgenius/dify/pull/15286 https://github.com/langgenius/dify/pull/15286.diff https://github.com/langgenius/dify/releases/tag/1.0.1 https://gist.github.com/Cristliu/216ddbadaf3258498c93d408683ecabd