CVE-2026-41947CWE-639

CVE-2026-41947

Critical · published May 18, 2026

CVSS v3.1
9.1
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

Dify before version 1.14.2 contains an authorization bypass vulnerability that allows authenticated editor users to set and enable trace configurations for any application regardless of tenant ownership. Attackers can exploit missing tenant ownership checks in the trace configuration endpoints to redirect all messages and responses from victim applications to attacker-controlled LLM trace providers. NOTE: Dify Cloud allows unauthenticated free self-registration, making account creation trivially accessible to any attacker.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00605 · 48.3th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-05-18T19:16Z
Affected products (1)
ProductVersionsFixed in
dify/dify≤ 1.14.1—
References (6)
https://github.com/langgenius/dify/commit/55d05fe52de880cd8497df8cea052351c594fad8 · [email protected]https://github.com/langgenius/dify/pull/35793 · [email protected]https://github.com/langgenius/dify/releases/tag/1.14.2 · [email protected]https://huntr.com/bounties/a43076b2-fbc8-4750-9647-89a036b52f52 · [email protected]https://www.vulncheck.com/advisories/dify-authorization-bypass-via-trace-configuration-endpoints · [email protected]https://www.zafran.io/resources/difytap-zafran-discovers-how-attackers-can-silently-wiretap-ai-data-across-tenants-on-a-platform-powering-1m-apps · [email protected]
EPSS history
Timeline
  • 18 MAY 13:48Z
    Dify < 1.14.2 Authorization Bypass via Trace Configuration Endpoints
    cvelistv5