---
id: CVE-2026-41950
title: >-
  Dify before version 1.14.0 contains an authorization bypass vulnerability that
  allows authenticated users to read the full contents of files uploaded by
  other users within the same tenant by supplying an arbitrary file UUID in the
  files …
summary: >-
  Dify before version 1.14.0 contains an authorization bypass vulnerability that
  allows authenticated users to read the full contents of files uploaded by
  other users within the same tenant by supplying an arbitrary file UUID in the
  files …
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-639
published: '2026-05-05'
updated: '2026-06-22'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-41950'
references:
  - url: 'https://github.com/langgenius/dify/releases/tag/1.14.0'
    label: disclosure@vulncheck.com
  - url: 'https://huntr.com/bounties/181136ec-d957-4b75-8ea7-6fa7b8abd01d'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/dify-authorization-bypass-via-file-uuid
    label: disclosure@vulncheck.com
  - url: >-
      https://www.zafran.io/resources/difytap-zafran-discovers-how-attackers-can-silently-wiretap-ai-data-across-tenants-on-a-platform-powering-1m-apps
    label: disclosure@vulncheck.com
  - url: 'https://huntr.com/bounties/181136ec-d957-4b75-8ea7-6fa7b8abd01d'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.00473
epssPercentile: 0.38345
ingestedAt: '2026-06-29T13:24:34.836Z'
---

## Overview

Dify before version 1.14.0 contains an authorization bypass vulnerability that allows authenticated users to read the full contents of files uploaded by other users within the same tenant by supplying an arbitrary file UUID in the files array of a chat-messages request. Attackers can exploit insufficient permission verification in the chat-messages endpoints to access files without ownership validation, bypassing workspace separation and signed URL protections to retrieve sensitive file contents through workflow processing.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.