CVE-2026-41947 is an authorization bypass vulnerability in langgenius's Dify product (version 1.14.1 and prior). Authenticated users with editor privileges can exploit missing tenant ownership checks in trace configuration endpoints to set and enable trace configurations for applications they do not own. This allows attackers to redirect all messages and responses from victim applications to attacker-controlled large language model (LLM) trace providers. The vulnerability is particularly concerning because Dify Cloud permits unauthenticated free self-registration, making it trivial for attackers to create accounts and exploit this flaw. The vulnerability has a critical CVSS 4.0 score of 9.1, indicating high impact and exploitability, although no known exploits are reported in the wild. There is no vendor advisory or patch information available at this time.

The vulnerability enables attackers with authenticated editor access to bypass tenant ownership restrictions and redirect sensitive application data to attacker-controlled endpoints. This can lead to unauthorized data exposure and potential manipulation of application responses. The ease of account creation on Dify Cloud increases the risk by allowing attackers to gain the necessary access with minimal effort. The critical CVSS score reflects the high severity of this authorization bypass flaw.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict editor privileges to trusted users only and monitor for suspicious trace configuration changes. Consider disabling or limiting trace configuration features if possible to reduce exposure.