AI’s Exposed Side Door: Dify Flaw (CVE-2025-63387) Leaks System Configs to Anonymous Users

A newly disclosed vulnerability in Dify, tracked as CVE-2025-63387, exposes internal system configurations to unauthenticated users, creating a high-severity Information Disclosure risk with a CVSS score of 7.5. The flaw arises because Dify version 1.9.1 does not enforce authentication on a critical endpoint: /console/api/system-features. An unauthenticated attacker can directly send HTTP GET requests to this endpoint and receive a full response, effectively bypassing proper authorization checks.

The advisory notes that the endpoint fails to implement adequate access controls, enabling anonymous access to sensitive system configuration data. Organisations running Dify v1.9.1 are urged to review their access controls promptly, as the flaw acts like a “welcome mat” for remote attackers. The vulnerability has been reported in a December 22, 2025 security write-up, which labels it as a significant risk for teams moving from prototype to production.