CVE-2026-123135 | langgenius dify up to 1.18.0/2.0.0-beta.2 Sandbox Run __init__.py hard-coded credentials (Issue 44054)

A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file api/configs/feature/__init__.py of the component Sandbox Run Handler. The manipulation results in hard-coded credentials.

This vulnerability is reported as CVE-2026-123135. The attack can be launched remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More