ZDI-CAN-29196: ZDI-26-452: Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Dify. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the OAuth flow handling in the AppInitializer component. An attacker can force a redirection to a site that serves malicious content. An attacker can leverage this vulnerability to disclose information in the context of the application.
Other sources
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Dify. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 5.4. The following CVEs are assigned: CVE-2026-18266.
— ZDI
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ZDI-26-452 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch CVE-2026-18266 - Compensating control
Use a compensating control to prevent open-redirect exploitation by ensuring OAuth redirect destinations are strictly validated/allow-listed in the Dify OAuth flow (specifically the oauth_redirect_url handling in the AppInitializer component), so that remote attackers cannot force redirection to attacker-controlled malicious sites.
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-29196?
The severity of ZDI-CAN-29196 is rated as medium with a score of 5.4.
How can I fix ZDI-CAN-29196?
To fix ZDI-CAN-29196, apply the latest security updates and patches provided by Dify.
What type of data can be exposed due to ZDI-CAN-29196?
ZDI-CAN-29196 allows remote attackers to disclose sensitive information due to an open redirect vulnerability.
Is user interaction required to exploit ZDI-CAN-29196?
Yes, user interaction is required for the exploitation of ZDI-CAN-29196 as the target must visit a malicious page.
Which software is affected by ZDI-CAN-29196?
ZDI-CAN-29196 affects Dify and LangGenius Dify (LangGenius) installations.