An unauthenticated Server‑Side Request Forgery (SSRF) flaw exists in Dify's /console/api/remote-files/upload endpoint, allowing an attacker to supply any URL for the server to fetch. Because no authentication is required, malicious parties can direct Dify to request internal or cloud‑metadata services, exposing sensitive data or using the server as a pivot. The weakness is a classic SSRF, identified by CWE-918, and can potentially compromise confidentiality and availability if internal resources are reached.

All installations of the open‑source Dify platform built prior to version 1.13.0 are affected. The problem resides in the remote_files.py controller handling /console/api/remote-files/upload. Users of earlier releases (any 1.X.x before 1.13.0) should be aware that their server exposes this unauthenticated endpoint.

The CVSS score of 8.3 reflects a high severity, with an unmitigated risk of remote request manipulation. Although an EPSS score is not provided, the absence of a CISA KEV listing indicates no publicly known exploits yet, but the exploitability remains high because the attacker only needs to send a crafted request to an unauthenticated endpoint. The flaw allows arbitrary outbound traffic from the application and can be used to enumerate internal networks or pull sensitive metadata.