CVE-2026-41947criticalCWE-639

CVE-2026-41947: critical vulnerability in langgenius dify

Dify < 1.14.2 Authorization Bypass via Trace Configuration Endpoints

Published · Updated

Follow this CVE+ Monitor dify

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

48Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 9.3epss 6.0%
Dify before version 1.14.2 contains an authorization bypass vulnerability that allows authenticated editor users to set and enable trace configurations for any application regardless of tenant ownership. Attackers can exploit missing tenant ownership checks in the trace configuration endpoints to redirect all messages and responses from victim applications to attacker-controlled LLM trace providers. NOTE: Dify Cloud allows unauthenticated free self-registration, making account creation trivially accessible to any attacker.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
langgenius · dify
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — langgenius dify

In the same product, most dangerous first.

CVE-2026-41948CRITICALDify v1.14.1 Path Traversal via Plugin Daemon Internal API AccessEPSS 22.7%CVE-2025-58747LOWDify MCP OAuth Flow Vulnerable to XSSEPSS 6.0%CVE-2026-28288MEDIUMDify has a user enumeration issueEPSS 0.7%CVE-2026-85021MEDIUMlanggenius dify Splash Layout splash.tsx router.replace cross site scriptingEPSS 0.5%CVE-2026-61461HIGHDify < 1.16.0-rc1 SQL Injection via MyScale Vector Store search_by_full_textEPSS 0.5%CVE-2026-41949HIGHDify < 1.14.2 Authorization Bypass via File Preview EndpointEPSS 0.4%