- Description
- Dify version 1.14.1 and prior contain a path traversal vulnerability that allows authenticated users to manipulate requests forwarded to the Plugin Daemon's internal REST API by exploiting insufficient URL path sanitization. Attackers can traverse out of their authorized tenant path using unencoded dot sequences in task identifiers or manipulated filename parameters to access internal endpoints such as debug interfaces, requiring only knowledge of the victim tenant's UUID. NOTE: Dify Cloud allows unauthenticated free self-registration, making account creation trivially accessible to any attacker.
- Source
- disclosure@vulncheck.com
- NVD status
- Modified
- Products
- dify
CVSS 4.0
- Type
- Secondary
- Base score
- 9.3
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity
- CRITICAL
CVSS 3.1
- Type
- Secondary
- Base score
- 9.4
- Impact score
- 5.5
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
- Severity
- CRITICAL
- disclosure@vulncheck.com
- CWE-23
- Hype score
- Not currently trending
🚨 CVE-2026-41948 - critical 🚨 Dify <=1.14.1 - Unauthenticated Plugin Daemon Path Traversal > Dify version 1.14.1 and prior are affected by an unauthenticated path traversal in th... 👾 https://t.co/T5ZlbzrbKm @pdnuclei #NucleiTemplates #cve
@pdnuclei_bot
15 Sept 2026
424 Impressions
1 Retweet
12 Likes
2 Bookmarks
0 Replies
0 Quotes
The Dify AI platform flaw (CVE-2026-41948) shows how path traversal in AI tools shatters workspace isolation & exposes internal APIs. #SecureZona maps non-human identities & locks down AI infrastructure posture before internal endpoints are exploited. #InfoSec #AISecuri
@securezona
5 Sept 2026
1 Impression
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2026-41940 & CVE-2026-41948 — cPanel & WHM Auth Bypass https://t.co/bk2HsFzyWm https://t.co/95dbCosOHp
@pwdnx1337
24 Jul 2026
68 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2026-41940 & CVE-2026-41948 — cPanel & WHM Auth Bypass https://t.co/bk2HsFzyWm
@pwdnx1337
24 Jul 2026
19 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2026-41940 & CVE-2026-41948 — cPanel & WHM Auth Bypass My friend github https://t.co/eWBYdUiux6
@pwdnx1337
23 Jul 2026
28 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Difyでテナント跨ぎでデータが漏洩する脆弱性群DifyTapについて。CVE-2024-5846、CVE-2026-41947、CVE-2026-41948、CVE-2026-41949、CVE-2026-41950。CVE-2026-41948は未修正。それ以外はバージョン1.14.2で修正。 https://t.co/r21ymejfZL
@__kokumoto
23 Jun 2026
797 Impressions
0 Retweets
2 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 Critical - Multiple Dify Vulnerabilities (CVE-2026-41947, CVE-2026-41948) Dify <= 1.14.1 is affected by critical authorization bypass and path traversal vulnerabilities that could allow authenticated attackers to access internal plugin daemon endpoints and redirect
@UpwindMDR
18 May 2026
64 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:dify:dify:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A125CFA5-D056-4A11-8EE1-0B5FC5628CF3",
"versionEndIncluding": "1.14.1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]