Vulnerability · Published Dec 18, 2025 · Assigned by mitre
CVE-2025-63387
Medium 4.3
In plain English
A medium-severity improper access control in Dify from Dify. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 18.7% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Official description
Dify 1.9.1 and 1.17.0 exposes the /console/api/system-features endpoint to unauthenticated HTTP GET requests that return system feature and configuration information. NOTE: The maintainer states that the endpoint is unauthenticated by design and serves as a bootstrap mechanism required for the dashboard initialization. They also state that the data is non-sensitive and required for client-side rendering. No PII, credentials, or secrets are exposed.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | dify-client | no fix listed | PYSEC-2025-103 |
Affected products (as reported)
Weakness: CWE-669, CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
- https://github.com/langgenius/dify/discussions
- https://gist.github.com/Cristliu/cddc0cbbf354de51106ab63a11be94af
- https://gist.github.com/Cristliu/dfc5f3a31dc6d7fff2754867e5c649a5
- https://github.com/langgenius/dify/issues/31368#issuecomment-3783712203
- https://github.com/langgenius/dify/pull/31417
- https://github.com/langgenius/dify/pull/31392