Threat
Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
Publication date not yet evaluated · Added thehackernews.com
Page published
Coverage timeline
Single-source research — one report is available.
Why it matters
Cross-tenant exposure of AI chats in a widely used agentic workflow platform could leak sensitive data from any organization relying on Dify.
Researchers at Zafran Security disclosed four vulnerabilities, collectively codenamed DifyTap, in the open-source agentic workflow platform Dify that could allow unauthenticated attackers to stealthily read AI conversations from other customers' applications across tenants.