CVE-2025-56157 | THREATINT

Description

Default credentials in Dify thru 1.5.1. PostgreSQL username and password specified in the docker-compose.yaml file included in its source code.

PUBLISHED Reserved 2025-08-16 | Published 2025-12-18 | Updated 2025-12-19 | Assigner mitre

References

gist.github.com/Cristliu/216ddbadaf3258498c93d408683ecabd exploit

github.com/langgenius/dify

gist.github.com/Cristliu/216ddbadaf3258498c93d408683ecabd

cve.org (CVE-2025-56157)

nvd.nist.gov (CVE-2025-56157)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.

help @ threatint.eu