DifyTap: Four Bugs Let Attackers Wiretap AI Conversations

Four vulnerabilities in Dify let attackers wiretap AI conversations across tenants. The platform powers over 1 million apps. Two of the bugs score above CVSS 9.0. CVE: CVE-2026-41947 (9.1), CVE-2026-4