{
  "entry": {
    "kind": "vuln",
    "slug": "cve-2026-41947",
    "name": "CVE-2026-41947",
    "vendor": "Dify",
    "description": "Zafran Security disclosed four vulnerabilities in the Dify open-source LLMOps platform (which powers 1M+ AI apps): CVE-2026-41947 (CVSS 9.1, cross-tenant trace-config bypass), CVE-2026-41948 (CVSS 9.4, plugin-daemon path traversal), CVE-2026-41949 and CVE-2026-41950 (cross-tenant/in-tenant file reads). Several require no authentication and let attackers \"wiretap\" AI chat data across tenants. All except CVE-2026-41948 are fixed in Dify 1.14.2; the path-traversal fix is pending the next release.",
    "website": "https://thehackernews.com/2026/06/researchers-detail-difytap-flaws-in.html",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": null,
    "configFiles": null,
    "category": "agent",
    "updatedAt": "2026-06-23",
    "risk": {
      "score": 91,
      "band": "critical",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "CVE-2026-41947",
      "aliases": [
        "ti-036"
      ],
      "title": "DifyTap: Four Authorization Flaws in Dify Enable Cross-Tenant AI Data Exfiltration",
      "summary": "Zafran Security disclosed four vulnerabilities in the Dify open-source LLMOps platform (which powers 1M+ AI apps): CVE-2026-41947 (CVSS 9.1, cross-tenant trace-config bypass), CVE-2026-41948 (CVSS 9.4, plugin-daemon path traversal), CVE-2026-41949 and CVE-2026-41950 (cross-tenant/in-tenant file reads). Several require no authentication and let attackers \"wiretap\" AI chat data across tenants. All except CVE-2026-41948 are fixed in Dify 1.14.2; the path-traversal fix is pending the next release.",
      "severity": "critical",
      "cvss": {
        "score": 9.1,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Other"
      ],
      "componentType": "agent",
      "component": {
        "name": "Dify",
        "vendor": null,
        "package": null,
        "ecosystem": null,
        "catalogSlug": "agent/dify"
      },
      "affected": [
        {
          "range": "<1.14.2",
          "fixed": "1.14.2"
        }
      ],
      "exploited": false,
      "exploitPublic": false,
      "publishedAt": "2026-06-23",
      "modifiedAt": "2026-06-23",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "article",
          "url": "https://thehackernews.com/2026/06/researchers-detail-difytap-flaws-in.html"
        },
        {
          "type": "cve",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41947"
        }
      ],
      "mitigation": "Upgrade Dify to 1.14.2+ and watch for the release that closes CVE-2026-41948. Restrict network access to Dify management/internal (plugin-daemon) services, enforce authentication on all endpoints, and audit cross-tenant file/trace access for the disclosure window.",
      "detectedByAnomity": true
    }
  }
}