Dify before 1.16.0-rc1 contains a SQL injection vulnerability in the MyScale vector store backend that allows attackers to execute arbitrary SQL by supplying unsanitized search parameters to the search_by_full_text method without escaping or parameterization. Attackers can inject malicious SQL through the search parameters to read, modify, or delete data in the underlying ClickHouse database.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://github.com/langgenius/dify/commit/d9884efaeea8322706e24c560d2c17e5bf3fab5f Patch
- https://github.com/langgenius/dify/pull/38295 Issue Tracking, Patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.7 · difyNVD modified 2026-10-08 16:17
Affected (CPE criteria) 1
cpe:2.3:a:dify:dify:*:*:*:*:*:*:*:*
References 5
- https://github.com/langgenius/dify/commit/d9884efaeea8322706e24c560d2c17e5bf3fab5f Patch
- https://github.com/langgenius/dify/issues/38281 Issue Tracking
- https://github.com/langgenius/dify/pull/38295 Issue Tracking, Patch
- https://github.com/langgenius/dify/releases/tag/1.16.0-rc1 Release Notes
- https://www.vulncheck.com/advisories/dify-rc1-sql-injection-via-myscale-vector-store-search-by-full-text Third Party Advisory