---
id: CVE-2026-41948
title: >-
  Dify version 1.14.1 and prior contain a path traversal vulnerability that
  allows authenticated users to manipulate requests forwarded to the Plugin
  Daemon's internal REST API by exploiting insufficient URL path sanitization
summary: >-
  Dify version 1.14.1 and prior contain a path traversal vulnerability that
  allows authenticated users to manipulate requests forwarded to the Plugin
  Daemon's internal REST API by exploiting insufficient URL path sanitization.
  Attackers ca…
severity: critical
cvss: 9.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L'
cwe:
  - CWE-23
vendor: dify
product: dify
affected:
  - dify <= 1.14.1
published: '2026-05-18'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T20:10:00.190'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-41948'
references:
  - url: 'https://github.com/langgenius/dify/pull/35796'
    label: disclosure@vulncheck.com
  - url: 'https://huntr.com/bounties/35b7ad59-e35d-443f-bf77-387bfb932ec0'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/dify-path-traversal-via-plugin-daemon-internal-api-access
    label: disclosure@vulncheck.com
  - url: >-
      https://www.zafran.io/resources/difytap-zafran-discovers-how-attackers-can-silently-wiretap-ai-data-across-tenants-on-a-platform-powering-1m-apps
    label: disclosure@vulncheck.com
tags:
  - nvd
  - exploit-available
epss: 0.01892
epssPercentile: 0.79171
exploits:
  nuclei:
    - CVE-2026-41948
  checkedAt: '2026-10-14T20:53:46.793Z'
exploitAvailable: true
ingestedAt: '2026-10-14T20:53:12.303Z'
---

## Overview

Dify version 1.14.1 and prior contain a path traversal vulnerability that allows authenticated users to manipulate requests forwarded to the Plugin Daemon's internal REST API by exploiting insufficient URL path sanitization. Attackers can traverse out of their authorized tenant path using unencoded dot sequences in task identifiers or manipulated filename parameters to access internal endpoints such as debug interfaces, requiring only knowledge of the victim tenant's UUID. NOTE: Dify Cloud allows unauthenticated free self-registration, making account creation trivially accessible to any attacker.

## Affected

- `dify <= 1.14.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.