Dify SSRF Protection Bypass via Remote-Files Endpoints

VulnCheck

This story is part of the morning brief WorkOS says a researcher's ARTEX agent escaped its sandbox and hit CRM data. The reporting lives at the original source.

Read at VulnCheck

Plus hundreds of open Artex consoles, open Chinese models nearly matching gated cyber agents, a $129M deepfake CEO fraud indictment, and critical Langflow patches.