CVE-2026-41948 is a path traversal vulnerability in langgenius's Dify product (version 1.14.1 and prior) where authenticated users can bypass tenant path restrictions by sending specially crafted requests with unencoded dot sequences in task identifiers or manipulated filename parameters. This exploits insufficient sanitization of URL paths forwarded to the Plugin Daemon's internal REST API, enabling access to internal endpoints such as debug interfaces. The attack requires knowledge of the tenant UUID. The vulnerability is rated critical with a CVSS 4.0 score of 9.2. No official patch or remediation level has been published, and the product is not a cloud service.

Successful exploitation allows attackers to traverse outside their authorized tenant directory and access internal API endpoints, potentially exposing sensitive internal interfaces like debug endpoints. This could lead to unauthorized information disclosure or further attacks within the affected system. The vulnerability requires authenticated access and tenant UUID knowledge, but the ease of account creation on Dify Cloud increases the risk of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Plugin Daemon's internal REST API and monitor for suspicious use of path traversal patterns. Consider disabling or restricting debug interfaces if possible. Since Dify Cloud allows free self-registration, implement additional tenant verification or monitoring to detect abuse.