Vulnerability · Published Mar 20, 2025 · Assigned by @huntr_ai

CVE-2025-0185Pandas Query Injection in langgenius/dify

High 8.8

In plain English

A high-severity code injection in langgenius/dify from langgenius. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).

Severity (CVSS 3.0)8.8High

Exploit odds (30 days)1.1%top 34.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability in the Dify Tools' Vanna module of the langgenius/dify repository allows for a Pandas Query Injection in the latest version. The vulnerability occurs in the function `vn.get_training_plan_generic(df_information_schema)`, which does not properly sanitize user inputs before executing queries using the Pandas library. This can potentially lead to Remote Code Execution (RCE) if exploited.

Affected products (as reported)

Vendor	Product	Versions
langgenius	langgenius/dify	unspecified – through latest

Weakness: CWE-94 · Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://huntr.com/bounties/7d9eb9b2-7b86-45ed-89bd-276c1350db7e