DifyTap Vulnerabilities Could Expose AI Chats and Files Across Dify Tenants

Security researchers have disclosed four vulnerabilities in Dify that could allow attackers to read private AI conversations, preview uploaded files, and reach internal platform APIs across tenant boundaries. The flaws were collectively named DifyTap by Zafran Security. The company said two of the bugs were critical, two required no authentication in some attack paths, and […] The post DifyTap Vulnerabilities Could Expose AI Chats and Files Across Dify Tenants appeared first on VPN Central.