PT-2026-41674 · Dify · Dify

Ido Shani + 1 · Published 2026-05-18 · Updated 2026-05-19 · CVE-2026-41947

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Dify versions prior to 1.14.1

Description An authorization bypass allows authenticated editor users to set and enable trace configurations for any application, regardless of tenant ownership. This occurs due to missing tenant ownership checks in the trace configuration endpoints, enabling attackers to redirect all messages and responses from victim applications to LLM trace providers under their control. Dify Cloud facilitates this by allowing unauthenticated free self-registration for account creation.

Recommendations Update to a version later than 1.14.1.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-41947

Affected Products

Dify

References · 10

• 🔥 https://huntr.com/bounties/a43076b2-fbc8-4750-9647-89a036b52f52 · Exploit
• https://github.com/langgenius/dify/commit/55d05fe52de880cd8497df8cea052351c594fad8 · Patch
• https://github.com/langgenius/dify/pull/35793 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-41947 · Security Note
• https://github.com/langgenius/dify/releases/tag/1.14.2 · Note
• https://t.me/cveNotify/164093 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2056399695572881624 · Twitter Post
• https://twitter.com/UpwindMDR/status/2056403788378853584 · Twitter Post
• https://vulncheck.com/advisories/dify-authorization-bypass-via-trace-configuration-endpoints · Note
• https://t.me/CVEtracker/54133 · Telegram Post