AnalysisCybersecurity
Jun 22, 4:13 PM
DifyTap vulnerabilities expose AI chats across tenants
Four vulnerabilities (two critical) in Dify's multi-tenant cloud service could allow unauthenticated attackers to read private AI conversations from other customers. The flaws, named DifyTap by Zafran Security, also enable cross-tenant API calls and file leakage.
Jun 22, 4:13 PM