# CVE-2026-41947: DifyTap: Four Authorization Flaws in Dify Enable Cross-Tenant AI Data Exfiltration

> CVE-2026-41947 is a critical-severity security issue (CVSS 9.1) in Dify, an AI agent. Affected: <1.14.2. Fixed in 1.14.2.

- **Canonical URL:** https://catalog.anomity.ai/vuln/cve-2026-41947
- **Aliases:** ti-036
- **Severity:** critical
- **CVSS:** 9.1
- **Attack type:** Other
- **Component:** Dify (AI agent)
- **Catalog entry:** https://catalog.anomity.ai/agent/dify
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-06-23
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/cve-2026-41947

## Summary

Zafran Security disclosed four vulnerabilities in the Dify open-source LLMOps platform (which powers 1M+ AI apps): CVE-2026-41947 (CVSS 9.1, cross-tenant trace-config bypass), CVE-2026-41948 (CVSS 9.4, plugin-daemon path traversal), CVE-2026-41949 and CVE-2026-41950 (cross-tenant/in-tenant file reads). Several require no authentication and let attackers "wiretap" AI chat data across tenants. All except CVE-2026-41948 are fixed in Dify 1.14.2; the path-traversal fix is pending the next release.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| <1.14.2 | 1.14.2 |

## Am I affected by CVE-2026-41947?

You are affected if you run Dify <1.14.2. Versions 1.14.2 and later include the fix.

## How do I fix CVE-2026-41947?

Upgrade Dify to 1.14.2+ and watch for the release that closes CVE-2026-41948. Restrict network access to Dify management/internal (plugin-daemon) services, enforce authentication on all endpoints, and audit cross-tenant file/trace access for the disclosure window.

## How do I find every machine running Dify?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Dify and which version, then enforce a policy on it.

## References

- article: https://thehackernews.com/2026/06/researchers-detail-difytap-flaws-in.html
- cve: https://nvd.nist.gov/vuln/detail/CVE-2026-41947

## Related vulnerabilities

- [CVE-2026-35616](https://catalog.anomity.ai/vuln/cve-2026-35616) — high
- [openai-two-internal-gpt-6-coding-agents-weakened-misalignment](https://catalog.anomity.ai/vuln/openai-two-internal-gpt-6-coding-agents-weakened-misalignment) — medium
- [pixelleak-coding-agents-posted-13-000-internal-screenshots-to-public](https://catalog.anomity.ai/vuln/pixelleak-coding-agents-posted-13-000-internal-screenshots-to-public) — high
- [claude-code-mods-function-hooks-preview-gives-plugin-and-skills-folder](https://catalog.anomity.ai/vuln/claude-code-mods-function-hooks-preview-gives-plugin-and-skills-folder) — medium
- [a-repo-defined-claude-code-subagent-downgraded-its-own-security-review](https://catalog.anomity.ai/vuln/a-repo-defined-claude-code-subagent-downgraded-its-own-security-review) — medium
- [owasp-publishes-the-2026-llm-top-10-and-an-agent-control-standard-for](https://catalog.anomity.ai/vuln/owasp-publishes-the-2026-llm-top-10-and-an-agent-control-standard-for) — low

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=cve-2026-41947