Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants

Researchers have identified four critical vulnerabilities in the open-source Dify agentic workflow platform, dubbed DifyTap, allowing unauthorized access to AI conversations and data across tenants. These flaws include authentication bypasses and path traversal vulnerabilities, potentially exposing sensitive informatio…