Vulnerability · Published May 5, 2026 · Assigned by VulnCheck

CVE-2026-41950Dify < 1.14.0 Authorization Bypass via File UUID

Medium 6.5

In plain English

A medium-severity authorization bypass via user-controlled key in dify from langgenius. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.3%top 71.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Dify before version 1.14.0 contains an authorization bypass vulnerability that allows authenticated users to read the full contents of files uploaded by other users within the same tenant by supplying an arbitrary file UUID in the files array of a chat-messages request. Attackers can exploit insufficient permission verification in the chat-messages endpoints to access files without ownership validation, bypassing workspace separation and signed URL protections to retrieve sensitive file contents through workflow processing.

Affected products (as reported)

Vendor	Product	Versions
langgenius	dify	0 – before 1.14.0

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://www.zafran.io/resources/difytap-zafran-discovers-how-attackers-can-silently-wiretap-ai-data-across-tenants-on-a-platform-powering-1m-apps technical-description, exploit
https://github.com/langgenius/dify/releases/tag/1.14.0 release-notes, patch
https://huntr.com/bounties/181136ec-d957-4b75-8ea7-6fa7b8abd01d technical-description, exploit
https://www.vulncheck.com/advisories/dify-authorization-bypass-via-file-uuid third-party-advisory