Published Jun 22, 2026, 12:13 PM ET · Updated 5 months ago · 1 source
Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
The Hacker News
·
Original Report
Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic workflow platform with more than 146,000 GitHub stars, that could allow attackers to stealthily read artificial intelligence (AI) conversions from other customers' applications without requiring authentication. The vulnerabilities have been collectively codenamed DifyTap by Zafran Security.