{"id":"CVE-2026-105761","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-105761","generatedAt":"2026-10-28T08:11:29.849Z","title":"Dify is an open-source LLM app development platform.","description":"Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server endpoint in api/controllers/console/app/mcp_server.py used AppMCPServerController.put() to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged to the requested application and tenant. An authenticated workspace member could therefore change another application's MCP server status and parameters, potentially redirecting data or disabling the service. This issue is fixed in version 1.16.0.","published":"2026-10-05T23:17:03.000Z","lastModified":"2026-10-06T16:08:43.000Z","status":"Deferred","sourceIdentifier":"security-advisories@github.com","cvss":{"version":"3.1","score":7.1,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L"},"cwe":["CWE-639"],"affected":[],"epss":{"score":0.00246,"percentile":0.15775,"date":"2026-10-27","history":[{"date":"2026-10-06","score":0.00246,"percentile":0.14481}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.25%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-05T23:17:03.000Z","detail":{"score":"7.1","severity":"HIGH","publishedAt":"2026-10-05T23:17:03.050Z"},"summary":"New CVE, high severity (CVSS 7.1)."}],"references":[{"url":"https://github.com/langgenius/dify/commit/62cb5b586504b730731e28e743c038b72950058e","source":"security-advisories@github.com"},{"url":"https://github.com/langgenius/dify/pull/38177","source":"security-advisories@github.com"},{"url":"https://github.com/langgenius/dify/releases/tag/1.16.0","source":"security-advisories@github.com"},{"url":"https://github.com/langgenius/dify/security/advisories/GHSA-ccrj-frp2-c945","source":"security-advisories@github.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-105761","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}