CVE-2025-56157
Critical · 9.8CVSS
9.8
EPSS
0.9%
Published
Dec 18, 2025
CISA due date
—
The record
Default credentials in Dify thru 1.5.1. PostgreSQL username and password specified in the docker-compose.yaml file included in its source code.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|