Is CVE-2026-41948 in the CISA Known Exploited Vulnerabilities catalog?

CVE-2026-41948 is not currently listed in the CISA KEV catalog.

Vulnerability intelligence

CVE-2026-41948

Four vulnerabilities in Dify — the open-source agentic workflow platform with 146K GitHub stars — allow cross-tenant data exposure. One remains unpatched. This is what AI readiness actually looks like.

2026

What WebPulse reported · 1 analysis

DifyTap: The AI Platform Powering 1 Million Apps Was Leaking Private Chats Between Tenants. CVSS 9.4.

Four vulnerabilities in Dify — the open-source agentic workflow platform with 146K GitHub stars — allow cross-tenant data exposure. One remains unpatched. This

June 26, 2026

View CVE-2026-41948 on the NIST National Vulnerability Database →

Related vulnerabilities

CVE-2026-9082 CVE-2026-8206 CVE-2026-48019 CVE-2026-35273 CVE-2026-11645 CVE-2026-8181 CVE-2026-47291 CVE-2026-45657