DifyTap just leaked private AI conversations across tenants. 1M+ apps. Volvo. Maersk. Panasonic. Patch now.

Four vulnerabilities in Dify just proved your AI stack has a blind spot your CISO doesn't know about.

Dify is the open-source platform behind 1 million AI applications.

Volvo, Maersk, Panasonic, Thermo Fisher use it.

Zafran Security found four flaws. Two critical. Two require zero authentication.

CVE-2026-41947 (CVSS 9.1): An attacker configures their own tracing backend on your app. Every prompt. Every response. Every conversation. Exfiltrated permanently. No detection. No alert.

CVE-2026-41948 (CVSS 9.4): Path traversal through the Plugin Daemon. Unauthenticated access to internal APIs. Cross-tenant by design. The architecture is the vulnerability.

CVE-2026-41949 and CVE-2026-41950: Preview any document across tenants. Leak any file within a tenant. UUID-only access. No permission checks.

10 million Docker pulls. Tens of thousands of internet-facing instances. And traditional container scanners miss the application-level CVEs entirely.

This is not a Dify problem. This is an AI platform security problem.

Zafran's research confirms: microservices-based AI architectures create vulnerabilities that container scanning tools cannot see.

Patch to version 1.14.2 today. Implement WAF rules for CVE-2026-41948 immediately. Audit every AI orchestration layer in your stack for the same tenant isolation failures Dify just exposed.