CVE-2026-41950 — Dify before version 1.14.0 contains an authorization bypass vulnerability that allows authenticated users to read the full contents of files uploaded by other users within the same tenant by supplying — CVE Database · The Intelligence Room