CVE-2025-63386 | Dify 1.9.1 Endpoint /console/api/setup access control

SecurityVulns
Yanac

A vulnerability marked as critical has been reported in Dify 1.9.1. This affects an unknown part of the file /console/api/setup of the component Endpoint. Performing manipulation results in improper access controls.

This vulnerability was named CVE-2025-63386. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More