CVE-2026-41949CWE-639

CVE-2026-41949

Medium · published May 18, 2026

CVSS v3.1
5.9
EPSS
1%
Percentile
46.2
In the wild
Unconfirmed
What it is

Dify before version 1.14.2 contains an authorization bypass vulnerability in the file preview endpoint that allows any authenticated user to read up to 3,000 characters of any uploaded document across all tenants and workspaces using only the file's UUID. Attackers can access the /console/api/files/{file_id}/preview endpoint with an intercepted file UUID to extract sensitive content from documents without ownership or workspace permission verification. NOTE: Dify Cloud allows unauthenticated free self-registration, making account creation trivially accessible to any attacker.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00566 · 46.2th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-05-18T19:16Z
Affected products (1)
ProductVersionsFixed in
dify/dify≤ 1.14.1—
References (6)
https://github.com/langgenius/dify/commit/432a6412a3fdb30ce48003d699b90cc7d890df20 · [email protected]https://github.com/langgenius/dify/pull/35797 · [email protected]https://github.com/langgenius/dify/releases/tag/1.14.2 · [email protected]https://huntr.com/bounties/d50a0240-7951-4939-b989-9bded66c7682 · [email protected]https://www.vulncheck.com/advisories/dify-authorization-bypass-via-file-preview-endpoint · [email protected]https://www.zafran.io/resources/difytap-zafran-discovers-how-attackers-can-silently-wiretap-ai-data-across-tenants-on-a-platform-powering-1m-apps · [email protected]
EPSS history
Timeline
  • 18 MAY 13:52Z
    Dify < 1.14.2 Authorization Bypass via File Preview Endpoint
    cvelistv5