Executive Summary
Zafran Security disclosed DifyTap, four vulnerabilities in the open-source Dify agentic workflow platform that could let attackers read other customers' AI conversations without authentication.
What Happened
Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic workflow platform with more than 146,000 GitHub stars, that could allow attackers to stealthily read artificial intelligence (AI) conversions from other customers' applications without requiring authentication. The vulnerabilities have been collectively codenamed DifyTap by Zafran Security.
Affected Products
- Dify
Vulnerability / Attack Technique
Unauthenticated cross-tenant access to AI conversations
Technical Mechanism
As reported, the flaws allowed reading AI chats from other customers' applications.
AI Security Category
LLM02:2025 Sensitive Information Disclosure
Relevant Frameworks
RealGround Analysis
AI conversation logs are sensitive data stores. RealGround analysis: patch Dify and limit conversation retention.
Recommended Controls
- Update Dify
- Limit retention of AI conversation logs
Related RealGround Service
Secure AI Agent Build · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/06/researchers-detail-difytap-flaws-in.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.