# CVE-2026-85021: langgenius Dify DOM-based XSS in splash.tsx redirect

Source: https://junglewise.ai/threats/cve-2026-85021-langgenius-dify-dom-based-xss-in-splash-tsx-redirect  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-03. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-85021 · Severity: medium · CVSS 4.3 · Published 2026-09-03

Dify is a workflow automation platform for building AI applications and RAG pipelines. A vulnerability in the splash layout allows attackers to craft malicious links that, when opened by users, execute arbitrary JavaScript in their browser. This could lead to credential theft, session hijacking, or unauthorized actions performed on behalf of the victim.

Technologies: [Langgenius Dify](https://junglewise.ai/threats/technologies/dify). Vendors: [Langgenius](https://junglewise.ai/threats/vendors/langgenius).

## Quick answers

**Is CVE-2026-85021 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-85021 being exploited in the wild.

**How severe is CVE-2026-85021?** Medium severity, with a CVSS score of 4.3, published 3 September 2026.

**Which products and versions are affected?** Langgenius Dify 1.13.0.

**Is there a fix for CVE-2026-85021?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-85021 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-85021?** Check whether you run Langgenius Dify at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A DOM-based XSS vulnerability exists in the Splash layout component (web/app/(shareLayout)/components/splash.tsx) where the redirect_url query parameter is passed unsanitized to Next.js router.replace(), which ultimately passes it to window.location. The vulnerable code reads the redirect_url parameter from search params and passes it directly to router.replace without sanitizing for the javascript: protocol. An attacker can craft a malicious URL that satisfies the application's URL parsing requirements and executes arbitrary JavaScript in the context of the victim's browser. The attack is network-accessible and does not require authentication; it relies on social engineering to trick a user into clicking a malicious link. No patch has been released by the vendor despite early disclosure on 2026-03-10.

## Affected products

- langgenius Dify 1.13.0

## Timeline

- 2026-03-10: disclosed: Disclosed to maintainers on GHSA
- 2026-09-03: advisory: CVE-2026-85021 published
- 2026-03-13: other: Also disclosed on Huntr

## References

- [https://gist.github.com/TrebledJ/0e8466e5c39a6fb7dca8a3acdfbe2ddc](https://gist.github.com/TrebledJ/0e8466e5c39a6fb7dca8a3acdfbe2ddc)
- [https://github.com/langgenius/dify/](https://github.com/langgenius/dify/)

## Related threats

- [langgenius dify hard-coded credentials in sandbox](https://junglewise.ai/threats/cve-2026-123135-a-vulnerability-was-found-in-langgenius-dify-up-to-1-18-0-2-0-0)
- [Dify authorization bypass in MCP server endpoint](https://junglewise.ai/threats/cve-2026-105761-dify-is-an-open-source-llm-app-development-platform-prior-to-1)
- [langgenius dify DOM-based XSS in redirect URL handler](https://junglewise.ai/threats/cve-2026-85022-langgenius-dify-dom-based-xss-in-redirect-url-handler)
- [LangGenius Dify server-side template injection in Jinja2 handler](https://junglewise.ai/threats/cve-2026-18632-langgenius-dify-server-side-template-injection-in-jinja2-handler)
- [LangGenius Dify open redirect in AppInitializer OAuth flow](https://junglewise.ai/threats/cve-2026-18266-langgenius-dify-open-redirect-in-appinitializer-oauth-flow)