CVE-2026-41950

Katalog CVE

CVSS 6.5 · Medium EPSS 0,47%

Kerentanan Authorization Bypass Through User-Controlled Key pada langgenius dify. Skor CVSS 3.1 6.5 (Medium) menurut vulncheck.com.

Deskripsi (NVD)

Dify before version 1.14.0 contains an authorization bypass vulnerability that allows authenticated users to read the full contents of files uploaded by other users within the same tenant by supplying an arbitrary file UUID in the files array of a chat-messages request. Attackers can exploit insufficient permission verification in the chat-messages endpoints to access files without ownership validation, bypassing workspace separation and signed URL protections to retrieve sensitive file contents through workflow processing.

Rincian

Terbit di NVD

5 Mei 2026

Terakhir diubah

24 Juli 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-639: Authorization Bypass Through User-Controlled Key

EPSS (30 hari)

0,47% peluang dieksploitasi; lebih tinggi dari 39,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://huntr.com/bounties/181136ec-d957-4b75-8ea7-6fa7b8abd01d exploit · advisory pihak ketiga
• https://www.vulncheck.com/advisories/dify-authorization-bypass-via-file-uuid advisory pihak ketiga
• https://github.com/langgenius/dify/releases/tag/1.14.0 release notes
• https://www.zafran.io/resources/difytap-zafran-discovers-how-attackers-can-silently-wiretap-ai-data-across-ten...