CVE-2025-1796

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-1796
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1796.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-1796
Published
2025-03-20T10:08:46Z
Modified
2026-08-12T03:51:08Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Admin account takeover through weak Pseudo-Random number generator used in generating password reset codes in langgenius/dify
Details

A vulnerability in langgenius/dify v0.10.1 allows an attacker to take over any account, including administrator accounts, by exploiting a weak pseudo-random number generator (PRNG) used for generating password reset codes. The application uses random.randint for this purpose, which is not suitable for cryptographic use and can be cracked. An attacker with access to workflow tools can extract the PRNG output and predict future password reset codes, leading to a complete compromise of the application.

Database specific 
{
    "cna_assigner": "@huntr_ai",
    "cwe_ids": [
        "CWE-338"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1796.json"
}
References

Affected packages

Git / github.com/langgenius/dify

Affected ranges

Type
GIT
Repo
https://github.com/langgenius/dify
Events
Introduced
400392230b47fff5d011b55afd8b0f8b8083ade0
Last Affected
400392230b47fff5d011b55afd8b0f8b8083ade0
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:langgenius:dify:0.10.1:*:*:*:*:node.js:*:*",
    "extracted_events": [
        {
            "introduced": "0.10.1"
        },
        {
            "last_affected": "0.10.1"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

0.*
0.10.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1796.json"