dify - 💡(How to fix) Fix MEDIUM: PBKDF2 password hashing uses only 10K iterations — OWASP recommends 600K+

CWE-916: PBKDF2 Password Hashing Uses Only 10,000 Iterations

Severity: MEDIUM (CVSS 5.1)

Location

• "" + pi/libs/password.py + "" + :

dk = hashlib.pbkdf2_hmac("sha256", password_str.encode(), salt_byte, 10000)

Description

Password hashing uses PBKDF2-HMAC-SHA256 with only 10,000 iterations. OWASP 2025 recommends 600,000+ iterations for PBKDF2-SHA256. At 10K iterations, an attacker with a modern GPU (RTX 4090: ~100M hashes/sec) can test ~10,000 passwords per second per hash.

Impact

If the database is compromised (e.g., via the hardcoded Redis/DB passwords), all password hashes can be brute-forced in minutes rather than years. Combined with the default credentials in .env.example, a full database dump gives an attacker every user's password.

Remediation

Increase iterations to at least 600,000. Consider migrating to Argon2id which is more resistant to GPU cracking.