🧰 Dify

The items that name it 7

• [tl;dr sec] #345 - Bug Rumors → Exploits, Version Control DFIR, Agentic Worms
  article2026-09-10
• How AI orchestration platforms ship RCE by design | Ebook/Report | Endor Labs
  paper2026-08-26
• Hacking your life with AI can get you hacked | Blog | Endor Labs
  writeup2026-08-18

  prescript.py runs a server-supplied {{preload}} string before lib.DifySeccomp(...) sandbox controls (chroot, no-new-privs, seccomp, uid drop) are applied, allowing code to run as euid=0 with NoNewPrivs:0 and read /etc/shadow before sandboxing takes effect. No patch by vendor decision; SANDBOX_ENABLE

• Cloud Threat Highlights: H1 2026
  writeup2026-08-06

  AI tool with a critical unauthenticated vulnerability.

• Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
  article

  Open-source agentic workflow platform with more than 146,000 GitHub stars; multi-tenant cloud service affected by DifyTap vulnerabilities

• DVLAA
  repo

  AWDP01-10 映射的公开披露开源 AI 项目之一，DVLAA 提供模拟目标与官方上游容器两种复现轨道

• Dify v1.14.1 Path Traversal via Plugin Daemon Internal API Access
  advisory

In every workspace you can read 12