CVE-2026-18632: langgenius dify Jinja2 jinja2_transformer.py jinja2.Template special elements used in a template engine
A security flaw has been discovered in langgenius dify up to 1.14.2. This issue affects the function jinja2.Template of the file api/core/helper/codeexecutor/jinja2/jinja2transformer.py of the component Jinja2 Handler. The manipulation results in improper neutralization of special elements used in a template engine. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
langgenius difyto a version that resolves this vulnerability.Fixed in 1.14.2 - Compensating control
Because the issue can be launched remotely and an exploit is publicly available, restrict network access to the Dify/Jinja2 Handler endpoint (where api/core/helper/code_executor/jinja2/jinja2_transformer.py runs) to trusted sources only (e.g., via firewall/ACL or put it behind an allowlisted reverse proxy).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-18632?
The severity of CVE-2026-18632 is rated as medium with a CVSS score of 6.3.
How do I fix CVE-2026-18632?
To fix CVE-2026-18632, update langgenius dify to version 1.14.3 or later.
What impact does CVE-2026-18632 have on applications?
CVE-2026-18632 can lead to improper neutralization of special elements in templates, potentially resulting in code execution vulnerabilities.
Which component is affected by CVE-2026-18632?
CVE-2026-18632 affects the Jinja2 Handler in the langgenius dify application.
Is CVE-2026-18632 exploitable remotely?
Yes, CVE-2026-18632 is remotely exploitable, allowing attackers to leverage the flaw without local access.