Researchers from Zafran Labs have uncovered four vulnerabilities in Dify, an open-source AI platform widely used by companies like Volvo and Maersk. These flaws put over one million AI applications at risk, exposing sensitive cross-tenant data, documents, and conversations. Notably, two of the vulnerabilities are critical, allowing unauthenticated users to gain access to and potentially steal data. This situation raises serious concerns for organizations that rely on Dify for their AI operations, as sensitive information could be compromised. Companies using this platform should take immediate action to assess their exposure and implement security measures to protect their data.