Data Exposure Flaws in Dify AI Platform Put 1 Million+ App Tenants at Risk

Security researchers disclosed multiple multi-tenant isolation vulnerabilities in Dify's cloud-hosted AI platform that permitted authenticated tenants to access other tenants' private conversation histories, preview uploaded documents, and reach internal APIs. The root cause is a failure to enforce tenant-scoped authorization combined with predictable identifiers and insufficient isolation; organizations using Dify SaaS should assume potential exposure until patches are applied and follow recommended mitigations (apply patches, audit uploaded data, rotate API keys, consider self-hosting).