Path Traversal in Dify Plugin Daemon Internal REST API

CVE-2026-41948 is a path traversal vulnerability in Dify 1.14.1 and earlier affecting the Plugin Daemon, the internal service responsible for managing and running plugins. The flaw stems from insufficient URL path sanitization when attacker-controlled values are incorporated into requests forwarded to the Plugin Daemon’s internal REST API. Reported exploitation primitives include a GET-based vector using a manipulated filename parameter in a plugin icon request and a POST-based vector affecting task deletion, including use of unencoded dot-segments in task identifiers. By traversing outside the intended tenant-scoped path, an attacker can reach internal or private Plugin Daemon endpoints, including debug-style interfaces, and potentially interact with arbitrary daemon API endpoints outside their authorized scope. Available reporting is somewhat inconsistent on whether authentication is always required, but the primary description states authenticated users can exploit the issue; in Dify Cloud, free self-registration makes obtaining an account trivial.