https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:51:43 +0000 https://db.gcve.eu/vuln/fkie_cve-2025-59422 <p>Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /console/api/apps/&lt;APP_ID&gt;chat-messages?conversation_id=&lt;CONVERSATION_ID&gt;&amp;limit=10 endpoint allows users in the same workspace to read chat messages of other users. A regular user is able to read the query data and the filename of the admins and probably other users chats, if they know the conversation_id. This impacts the confidentiality of chats. This issue has been patched in version 1.9.0.</p> <p>Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /console/api/apps/&lt;APP_ID&gt;chat-messages?conversation_id=&lt;CONVERSATION_ID&gt;&amp;limit=10 endpoint allows users in the same workspace to read chat messages of other users. A regular user is able to read the query data and the filename of the admins and probably other users chats, if they know the conversation_id. This impacts the confidentiality of chats. This issue has been patched in version 1.9.0.</p> https://db.gcve.eu/vuln/fkie_cve-2025-59422