CVE-2025-58747

Dify is an LLM application development platform. In Dify versions through 1.9.1, the MCP OAuth component is vulnerable to cross-site scripting when a victim connects to an attacker-controlled remote MCP server. The vulnerability exists in the OAuth flow implementation where the authorization_url provided by a remote MCP server is directly passed to window.open without validation or sanitization. An attacker can craft a malicious MCP server that returns a JavaScript URI (such as javascript:alert(1)) in the authorization_url field, which is then executed when the victim attempts to connect to the MCP server. This allows the attacker to execute arbitrary JavaScript in the context of the Dify application.

• CWE-79

• https://github.com/langgenius/dify/commit/bfda4ce7e6f39d43a4420e97e23a18edcfe3e3d3Patch
• https://github.com/langgenius/dify/security/advisories/GHSA-9jch-j9qf-vqfwExploit, Vendor Advisory

Published

Oct 17, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-58741Insufficiently Protected Credentials vulnerability in the Cr…7.5
• CVE-2025-58742Insufficiently Protected Credentials, Improper Restriction o…5.9
• CVE-2025-58743Use of a Broken or Risky Cryptographic Algorithm (DES) vulne…7.5
• CVE-2025-58744Use of Default Credentials, Hard-coded Credentials vulnerabi…7.5
• CVE-2025-58745WeGIA is a Web manager for charitable institutions. The fix …8.8
• CVE-2025-58746The Volkov Labs Business Links panel for Grafana provides an…9
• CVE-2025-58748Dataease is an open source data analytics and visualization …9.8
• CVE-2025-58749WebAssembly Micro Runtime (WAMR) is a lightweight standalone…5.3
• CVE-2025-5875A vulnerability classified as critical has been found in TP-…8.8
• CVE-2025-58750rAthena is an open-source cross-platform massively multiplay…9.1
• CVE-2025-58751Vite is a frontend tooling framework for JavaScript. Prior t…5.3
• CVE-2025-58752Vite is a frontend tooling framework for JavaScript. Prior t…5.3