PatchTheCVEdify vulnerabilities
Recent CVEs affecting dify products. 1 tracked.
dify has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-07-10. Highest priority: CVE-2026-61461 (score 41/100).
- CVE-2026-61461 HIGH 8.8 UPGRADE Dify before 1.16.0-rc1 contains a SQL injection vulnerability in the MyScale vector store backend that allows
FAQ
How do I fix dify vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dify being exploited right now?
None of the tracked dify CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dify CVE should I patch first?
CVE-2026-61461 currently ranks highest (41/100): Dify before 1.16.0-rc1 contains a SQL injection vulnerability in the MyScale vector store backend that allows .