Four Critical Dify Flaws Let Attackers Wiretap AI Chats Across Tenants
Zafran Labs uncovered four high‑severity flaws in Dify, the open‑source LLMOps platform used by over a million AI apps, that let attackers read chat histories, preview other tenants' files, and exploit an outdated PDFium component. The bugs, tracked as CVE‑2026‑41947 to CVE‑2026‑41950, are patched in version 1.15.0, but many deployments remain vulnerable.