Tag: Plugin Daemon API

CVE-2026-41948: Path Traversal in Dify Plugin Daemon API

A critical path traversal vulnerability (CVSS 9.4) in Dify that allows authenticated users to manipulate requests forwarded to the Plugin Daemon's internal…