1M+ App AI Platform Dify Hit by Critical Cross-Tenant Data Exposure Flaws

Four newly disclosed vulnerabilities in Dify, the open-source LLMOps platform powering over one million AI applications, have exposed serious architectural weaknesses that can leak private AI conversations and sensitive documents across enterprise tenants. Collectively dubbed DifyTap by researchers at Zafran Security, the flaws affect a platform trusted by major enterprises including Volvo, Maersk, Panasonic, and Thermo Fisher. With more than 140,000 GitHub stars, over 10…