CVE-2026-41950Medium· 6.5▾ Sunlit

Dify before version 1.14.0 contains an authorization bypass vulnerability that allows authenticated users to read the full contents of files uploaded by other users within the same tenant by supplying an arbitrary file UUID in the files …

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score36/ 100 · Low

impact 35.8 · likelihood 0.1 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

May 5, 2026

Updated

Jun 22, 2026

CVSS

6.5

Vendor

—

Product

—

CWE

CWE-639

Depth score

36 · Low

EPSS

0.35% · p28

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS history

Exploit-prediction probability, daily snapshots since Jul 31.

0.3% → 0.3%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

4 events · 143 days

May 5, 2026Published
Disclosed via NVD
Jun 22, 2026Record revised
Last analysed / modified upstream
Jul 31, 2026EPSS first tracked
0.3%
Sep 25, 2026EPSS peak
0.3% → 0.5%

CWE-639 #nvd

Full technical detail▾

Overview

Dify before version 1.14.0 contains an authorization bypass vulnerability that allows authenticated users to read the full contents of files uploaded by other users within the same tenant by supplying an arbitrary file UUID in the files array of a chat-messages request. Attackers can exploit insufficient permission verification in the chat-messages endpoints to access files without ownership validation, bypassing workspace separation and signed URL protections to retrieve sensitive file contents through workflow processing.

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd

← Back to feed