Executive brief
Dify is a workflow automation platform for building AI applications and RAG pipelines. A vulnerability in the splash layout allows attackers to craft malicious links that, when opened by users, execute arbitrary JavaScript in their browser. This could lead to credential theft, session hijacking, or unauthorized actions performed on behalf of the victim.
Technical details
A DOM-based XSS vulnerability exists in the Splash layout component (web/app/(shareLayout)/components/splash.tsx) where the redirect_url query parameter is passed unsanitized to Next.js router.replace(), which ultimately passes it to window.location. The vulnerable code reads the redirect_url parameter from search params and passes it directly to router.replace without sanitizing for the javascript: protocol. An attacker can craft a malicious URL that satisfies the application's URL parsing requirements and executes arbitrary JavaScript in the context of the victim's browser. The attack is network-accessible and does not require authentication; it relies on social engineering to trick a user into clicking a malicious link. No patch has been released by the vendor despite early disclosure on 2026-03-10.
Affected products
- langgenius Dify 1.13.0
Timeline
- 2026-03-10: disclosed: Disclosed to maintainers on GHSA
- 2026-09-03: advisory: CVE-2026-85021 published
- 2026-03-13: other: Also disclosed on Huntr