Path Traversal in Dify Plugin Daemon Internal REST API

CVE-2026-41948 is a path traversal vulnerability in Dify 1.14.1 and earlier affecting the Plugin Daemon, the internal service responsible for managing and running plugins. The flaw stems from insufficient URL path sanitization when attacker-controlled values are incorporated into requests forwarded to the Plugin Daemon’s internal REST API. Reported exploitation primitives include a GET-based vector using a manipulated filename parameter in a plugin icon request and a POST-based vector involving task deletion with crafted task identifiers containing unencoded dot sequences. By traversing outside the intended tenant-scoped path, an attacker can reach internal or private Plugin Daemon endpoints, including debug-style interfaces such as pprof, and potentially interact with arbitrary daemon API endpoints across tenant boundaries. The provided reporting is somewhat inconsistent on authentication requirements: some sources describe the vulnerable endpoints as requiring no authentication, while others characterize exploitation as available to authenticated users; however, Dify Cloud’s free self-registration materially lowers the barrier either way.