PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-41950 langgenius CVE debrief

CVE-2026-41950 is a medium-severity authorization bypass vulnerability in Dify, a platform powering 1 million apps, before version 1.14.0. The issue allows authenticated users to read the full contents of files uploaded by other users within the same tenant by supplying an arbitrary file UUID in chat-messages requests. This is possible due to insufficient permission verification in chat-messages endpoints, which bypasses workspace separation and signed URL protections. The vulnerability has a CVSS score of 6 and was published on May 5, 2026.

Vendor
langgenius
Product
dify
CVSS
MEDIUM 6
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-05
Original CVE updated
2026-07-24
Advisory published
2026-05-05
Advisory updated
2026-07-24

Who should care

Defenders of Dify installations, particularly those with multi-tenant setups, should be aware of this vulnerability. The issue affects Dify versions before 1.14.0, and upgrading to this version or later is recommended. Security teams should prioritize patching, as this vulnerability allows unauthorized access to sensitive file contents across tenants.

Technical summary

The vulnerability exists in Dify's chat-messages endpoints, where inadequate permission checks allow authenticated users to access files uploaded by other users within the same tenant. By providing an arbitrary file UUID in the files array of a chat-messages request, attackers can bypass workspace separation and signed URL protections to retrieve sensitive file contents. This issue is addressed in Dify version 1.14.0, which enhances permission verification and validation.

Defensive priority

Medium priority due to the need for authentication and the specificity of the attack vector, but high impact if exploited.

Recommended defensive actions

  • Upgrade Dify to version 1.14.0 or later
  • Review and enhance permission settings for chat-messages endpoints
  • Monitor for suspicious file access requests across tenants
  • Implement compensating controls to restrict file access
  • Conduct a thorough inventory of Dify installations and their versions

Evidence notes

The CVE record and NVD detail provide the primary evidence for this vulnerability. The issue is confirmed to affect Dify versions before 1.14.0. Defenders should verify their Dify installations and upgrade to the patched version. The vulnerability allows unauthorized file access across tenants, bypassing workspace separation.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-41950 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-41950

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-41950 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-41950

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.