people · May 21, 2026
AI platform Dify exposed users to account takeover
Share the canonical public link.
Imperva researchers disclosed critical vulnerabilities in Dify, a popular low-code AI application development platform with over 142,000 stars on GitHub and 10 million installs. The flaws allowed one-click account takeover on the open-source platform used by companies to build and run their own AI tools without hiring engineering teams. Imperva researchers warn that AI tools are racing to add features without ensuring security. Dify is a hugely popular open-source platform that lets companies build and run their own AI tools without hiring teams of engineers.
Below validation threshold — auto-passed without scoring