AnalysisCybersecurityDevelopers
4 hours ago
DifyTap vulnerabilities in Dify expose AI chats across tenants
Four vulnerabilities in the open-source platform Dify (146K+ GitHub stars) allow attackers to read AI conversations from other tenants' apps. DifyTap can be exploited without authentication, impacting cross-tenant isolation.
4 hours ago