CVE-2025-67732: Dify LLM API Key Exposure Vulnerability

CVE-2025-67732 Overview

CVE-2025-67732 is an information disclosure vulnerability in Dify, an open-source LLM (Large Language Model) application development platform. Prior to version 1.11.0, the platform exposes API keys in plaintext to the frontend interface, allowing non-administrator users to view and potentially reuse these sensitive credentials. This security flaw falls under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) and can lead to unauthorized access to third-party services integrated with the Dify platform.

Critical Impact
Non-administrator users can access plaintext API keys, enabling unauthorized consumption of third-party service quotas and potential lateral movement to connected AI services.

Affected Products

Dify versions prior to 1.11.0
Dify LLM app development platform deployments with multi-user access
Self-hosted and cloud instances running vulnerable versions

Discovery Timeline

2026-01-05 - CVE CVE-2025-67732 published to NVD
2026-01-08 - Last updated in NVD database

Technical Details for CVE-2025-67732

Vulnerability Analysis

This vulnerability represents a significant information disclosure flaw in the Dify platform's access control implementation. The core issue lies in the application's handling of sensitive API credentials, where API keys for third-party services (such as OpenAI, Anthropic, or other LLM providers) are transmitted and rendered in plaintext within the frontend interface. This means that any authenticated user, regardless of their privilege level, can access these credentials through normal browser inspection tools or network traffic analysis.

The impact extends beyond simple credential exposure. API keys for LLM services often have associated usage quotas and billing implications. Unauthorized access to these keys could result in significant financial impact through quota consumption, service abuse, or unauthorized data access to connected third-party services. Additionally, exposed API keys could be used to exfiltrate data or perform actions under the guise of the legitimate key owner.

Root Cause

The root cause of this vulnerability is improper access control in the Dify application's frontend data handling. The application fails to implement proper role-based access restrictions when transmitting API key data to the client-side interface. Instead of masking or restricting API key visibility to administrator-only roles, the backend sends complete, unobfuscated credentials to all authenticated users, regardless of their authorization level. This violates the principle of least privilege and exposes sensitive configuration data to users who should not have access to it.

Attack Vector

The attack vector for CVE-2025-67732 is network-based with low complexity. An attacker with valid low-privilege credentials on a Dify instance can exploit this vulnerability through the following steps:

Authenticate to the Dify platform with any valid user account (non-administrator)
Navigate to areas of the application where API configurations are displayed or accessible
Use browser developer tools to inspect network responses or DOM elements
Extract the plaintext API keys from the exposed data
Use the compromised credentials to access third-party services directly, bypassing Dify's access controls

The vulnerability requires authentication but no additional user interaction, making it readily exploitable by any insider or user with compromised credentials.

Detection Methods for CVE-2025-67732

Indicators of Compromise

Unusual API usage patterns or quota consumption spikes on connected third-party LLM services
Authentication logs showing non-administrator users accessing API configuration endpoints
Unexpected API calls originating from IP addresses not associated with the Dify deployment
Third-party service alerts indicating API key usage from unauthorized locations

Detection Strategies

Monitor Dify application logs for non-admin users accessing configuration or settings pages that contain API key data
Implement network traffic analysis to detect API key patterns being transmitted to or from the frontend
Enable audit logging for all API configuration access attempts and cross-reference with user privilege levels
Deploy DLP (Data Loss Prevention) solutions to detect API key patterns in network traffic

Monitoring Recommendations

Establish baseline API usage metrics for connected third-party services and alert on anomalies
Configure third-party LLM providers to send usage alerts and track key utilization by request source
Implement session monitoring to track user navigation patterns and detect reconnaissance activities
Enable detailed audit trails for all administrative actions and configuration access in the Dify platform

How to Mitigate CVE-2025-67732

Immediate Actions Required

Upgrade Dify to version 1.11.0 or later immediately to remediate this vulnerability
Rotate all API keys that were configured in vulnerable Dify instances as they should be considered potentially compromised
Review access logs to identify if any non-administrator users accessed API configuration areas
Audit third-party service usage logs for any unauthorized or anomalous activity during the exposure window

Patch Information

The vulnerability has been addressed in Dify version 1.11.0. Organizations running affected versions should upgrade to 1.11.0 or later as soon as possible. The security advisory with additional details is available through the Dify GitHub Security Advisory. After upgrading, administrators should verify that API keys are properly masked in the frontend interface and conduct a full credential rotation for all integrated services.

Workarounds

Restrict platform access to only trusted administrator accounts until the patch can be applied
Implement network-level restrictions to limit Dify access to specific IP ranges or VPN connections
Monitor and rate-limit API key usage on third-party services to minimize potential abuse impact
Consider temporarily disabling or removing third-party API integrations until the upgrade is complete

bash

# Configuration example
# Upgrade Dify to patched version
cd /path/to/dify
git fetch --tags
git checkout v1.11.0

# Restart Dify services after upgrade
docker-compose down
docker-compose up -d

# Verify version after upgrade
docker exec dify-api cat /app/version.txt