Opening SecureFlowDifyTap Cross-Tenant AI Data Exposure
Case summary & sources

AIDEFEND SecureFlow / SecureFlow Case Index

Zafran aidefend-sf0010

DifyTap Cross-Tenant AI Data Exposure

  • AI Infrastructure
  • RAG & Knowledge Systems
  • Data Exfiltration

Zafran disclosed distinct Dify paths for cross-tenant trace exfiltration, unauthenticated Plugin Daemon path traversal, file-UUID authorization bypass, and exposure of a known PDFium use-after-free through document preview. The graph keeps those paths separate and bounds the Plugin Daemon impact to what the source demonstrated.

Mapped threat techniques

Source

Updated