A new set of bugs in a popular AI building platform could allow attackers to effectively wiretap vulnerable customers. Researchers with security vendor Zafran discovered a series of four vulnerabilities in Dify, an open source AI platform that acts as a kind of orchestration layer to help organizations create, deploy, and manage AI applications without needing to build out the infrastructure themselves. Dify is exceedingly popular; it has more than 10 million pulls of its API image on Docket, and Zafran identified tens of thousands of Internet-facing Dify instances. The set of vulnerabilities, referred to cumulatively as "DifyTap," includes tracing configuration flaw CVE-2026-41947 (CVSS 9.1); Plugin Daemon path traversal vulnerability CVE-2026-41948 (CVSS 9.4); unauthorized document preview bug CVE-2026-41949 (CVSS 6.5); and cross-file user access flaw CVE-2026-41950 (CVSS 6.5). If exploited, these vulnerabilities would enable attackers to leak private AI chat histories, traverse Dify's internal Plugin Daemon API from unauthenticated requests, preview documents uploaded by other tenants without permission checks, and leak files across users within a tenant. CVE-2026-41947, CVE-2026-41949, and CVE-2026-41950 have been patched in Dify version 1.14.2. A fix for CVE-2026-41948 has been merged on GitHub, and customers can build and deploy the most recent version on GitHub, which addresses all four flaws at once. Zafran's blog post also notes that "For those currently operating on...
DifyTap Bugs Let Attackers 'Wiretap' AI Chat Histories
Dark Reading
·Alexander Culafi
·Published Jun 22, 2026
·Updated
Affected Software
1 affected component
Dify Dify (open source AI platform)<1.14.2
Frequently Asked Questions
1
What is the main topic of this article?
The article discusses vulnerabilities in the Dify AI platform that could allow attackers to wiretap chat histories.
2
What security implications are discussed in the article?
The vulnerabilities could lead to unauthorized access and interception of sensitive AI chat data.
3
What products or software are affected by these vulnerabilities?
The vulnerabilities specifically affect the Dify open source AI platform.
4
Who discovered the vulnerabilities in Dify?
The vulnerabilities were discovered by researchers from the security vendor Zafran.
5
How many vulnerabilities were found in the Dify platform?
A total of four vulnerabilities were identified in the Dify platform.