{
 "id": "AIR-2025-0415",
 "slug": "cve-2025-32796-access-control-flaw-in-dify-llm-app-platform",
 "title": "CVE-2025-32796: Access Control Flaw in Dify LLM App Platform",
 "summary": "An access control vulnerability in Dify allows normal users to enable or disable apps through the API without proper permissions. The issue was addressed in version 0.6.12 to prevent unauthorized configuration changes.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Dify"
 ],
 "incident_date": "2025-04-18",
 "incident_date_precision": "day",
 "first_reported": "2025-04-18",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32796",
   "publisher": "NVD",
   "title": "CVE-2025-32796: Dify is an open-source LLM app development platform.",
   "published_at": "2025-04-18"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2025-32796",
  "access-control"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}