Description
A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/(shareLayout)/components/splash.tsx of the component Splash Layout. This manipulation of the argument redirect_url causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-09-03
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A remote attacker can manipulate the redirect_url argument passed to router.replace in the Splash Layout component of langgenius dify. This results in the injection of arbitrary payloads that execute client‑side code. The vulnerability is a classic reflected or reflected cross‑site scripting flaw, classified as CWE‑79, and also involves potentially using code execution within the application context, CWE‑94.

Affected Systems

langgenius dify, version 1.13.0, where the vulnerable logic resides in the file web/app/(shareLayout)/components/splash.tsx.

Risk and Exploitability

The CVSS score of 5.3 indicates a moderate risk level. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is remote, requiring the attacker to supply a crafted URL or request that triggers the router.replace behavior. Public exploitation has been disclosed, and the vendor has not yet provided a fix.

Generated by OpenCVE AI on September 3, 2026 at 09:26 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest langgenius dify release that addresses the XSS in router.replace. If no patch is available, upgrade to a newer major release once one is published.
  • Sanitize or validate the redirect_url input before passing it to router.replace, and consider disabling or removing the redirect functionality until a patch can be applied.
  • Deploy a web application firewall or enforce a strict content security policy to block reflected XSS scripts until a definitive fix is deployed.

Generated by OpenCVE AI on September 3, 2026 at 09:26 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 03 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 03 Sep 2026 01:15:00 +0000

Type Values Removed Values Added
Description A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/(shareLayout)/components/splash.tsx of the component Splash Layout. This manipulation of the argument redirect_url causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Title langgenius dify Splash Layout splash.tsx router.replace cross site scripting
First Time appeared Langgenius
Langgenius dify
Weaknesses CWE-79
CWE-94
CPEs cpe:2.3:a:langgenius:dify:*:*:*:*:*:*:*:*
Vendors & Products Langgenius
Langgenius dify
References
Metrics cvssV2_0

{'score': 5, 'vector': 'AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:C'}

cvssV3_0

{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C'}

cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Langgenius Dify
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-09-03T15:01:00.099Z

Reserved: 2026-09-02T19:47:11.496Z

Link: CVE-2026-85021

cve-icon Vulnrichment

Updated: 2026-09-03T15:00:34.641Z

cve-icon NVD

Status : Deferred

Published: 2026-09-03T13:06:19.193

Modified: 2026-09-03T17:25:25.113

Link: CVE-2026-85021

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-03T09:45:03Z

Weaknesses
  • CWE-79

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  • CWE-94

    Improper Control of Generation of Code ('Code Injection')