Threat · curated 27 Jun 2026
DifyTap Bugs Let Attackers 'Wiretap' AI Chat Histories
First reported darkreading.com
Coverage timeline
Single-source advisory — first reported, latest, and curated coincide.
Why it matters
Flaws in AI application platforms can expose sensitive chat data and enable covert exfiltration, putting organizations that rely on these tools at risk.
Four vulnerabilities dubbed 'DifyTap' in Dify, a platform for building and managing AI applications, allow attackers to silently access and exfiltrate sensitive data, including AI chat histories.