ZDI-26-452: Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Dify. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the OAuth flow handling in the AppInitializer component. An attacker can force a redirection to a site that serves malicious content. An attacker can leverage this vulnerability to disclose information in the context of the application.
Other sources
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Dify. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 5.4. The following CVEs are assigned: CVE-2026-18266.
— ZDI
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ZDI-26-452 - Configuration
Ensure oauth_redirect_url redirect targets are restricted to a strict allowlist of approved redirect URIs in the OAuth flow handled by the AppInitializer component.
Dify (OAuth flow handling in AppInitializer) oauth_redirect_url = allowlist-only - Compensating control
Mitigate the open redirect issue by preventing OAuth redirect URL values (oauth_redirect_url) from being processed unless they match an allowlist of expected domains/paths in the OAuth flow (AppInitializer component).
Event History
Frequently Asked Questions
What is the severity of ZDI-26-452?
The severity of ZDI-26-452 is rated as medium with a score of 5.4.
How do I fix ZDI-26-452?
To fix ZDI-26-452, ensure that the OAuth flow in Dify is securely configured to prevent open redirect vulnerabilities.
What type of vulnerability is ZDI-26-452?
ZDI-26-452 is an open redirect vulnerability that allows remote attackers to exploit sensitive information disclosure.
What is required to exploit ZDI-26-452?
Exploiting ZDI-26-452 requires user interaction, meaning the target must visit a malicious page or open a malicious file.
Which software is affected by ZDI-26-452?
The vulnerability ZDI-26-452 affects Dify and LangGenius Dify installations.