PT-2026-41676 · Dify · Dify

-Lan- + 2 · Published 2026-05-18 · Updated 2026-05-18 · CVE-2026-41949

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dify versions prior to 1.14.1

Description An authorization bypass exists in the file preview endpoint, allowing any authenticated user to read up to 3,000 characters of any uploaded document across all tenants and workspaces. An attacker can use an intercepted file UUID to access the "/console/api/files/{file id}/preview" endpoint and extract sensitive content without ownership or workspace permission verification. Dify Cloud facilitates this by allowing unauthenticated free self-registration, making account creation easily accessible.

Recommendations Update to a version later than 1.14.1. As a temporary workaround, restrict access to the "/console/api/files/{file id}/preview" endpoint to minimize the risk of unauthorized document access.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-41949

Affected Products

Dify

References · 8

• 🔥 https://huntr.com/bounties/d50a0240-7951-4939-b989-9bded66c7682 · Exploit
• https://github.com/langgenius/dify/commit/432a6412a3fdb30ce48003d699b90cc7d890df20 · Patch
• https://github.com/langgenius/dify/pull/35797 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-41949 · Security Note
• https://github.com/langgenius/dify/releases/tag/1.14.2 · Note
• https://twitter.com/VulmonFeeds/status/2056397135612903643 · Twitter Post
• https://vulncheck.com/advisories/dify-authorization-bypass-via-file-preview-endpoint · Note
• https://t.me/CVEtracker/54135 · Telegram Post