An unauthenticated authorization bypass in Dify versions prior to 1.14.2 allows attackers to intercept sensitive AI data across tenants.

The application suffers from an authorization bypass (CWE-639) where user-controlled keys are not properly validated. The vulnerability is fully automatable and does not require authentication (PR:N), enabling remote attackers to access unauthorized data.

Successful exploitation poses a severe risk to data confidentiality and integrity, as attackers can gain unauthorized access to proprietary AI models and sensitive data across different tenants. Given the CVSS score of 7.4 (High), the potential for cross-tenant data leakage could result in significant regulatory non-compliance, loss of customer trust, and unauthorized exposure of intellectual property.

Immediate Action: Update the Dify installation to version 1.14.2 or later immediately to resolve the authorization logic flaw.

Proactive Monitoring: Review system access logs for anomalous requests directed at trace configuration endpoints or unusual patterns in cross-tenant data access.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules designed to identify and block unauthorized access attempts to configuration and API endpoints related to tracing.

Public Exploit Available: Unknown.

The severity of this authorization bypass necessitates immediate action. Organizations utilizing Dify must prioritize patching to version 1.14.2 to prevent potential data exfiltration and cross-tenant compromise.