Vendors / langfuse Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now langfuse records in CISA KEV No langfuse vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 66
Improper authorization in the background migration endpoints of Langfuse 3.1 before d67b317 allows any authenticated user to invoke migration control functions.
CVSS 3.1 HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00281 · Published 2025-09-24 · No fix listed CWE-285
Priority MEDIUM 61
Langfuse is an open source large language model engineering platform.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00431 · Published 2026-01-22 · Fixed in 3.147.0 CWE-284
Priority MEDIUM 45
A security flaw has been discovered in Langfuse up to 3.88.0.
CVSS 4.0 LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00299 · Published 2025-09-01 · No fix listed CWE-918
Priority LOW 29
Langfuse is an open source large language model engineering platform.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00181 · Published 2026-05-08 · Fixed in 3.167.0 CWE-284
Priority LOW 28
Langfuse is an open source large language model engineering platform.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00167 · Published 2025-11-21 · Fixed in 2.95.12, 3.131.0 CWE-285
Priority LOW 23
Langfuse is an open source large language model engineering platform.
CVSS 3.1 MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.00341 · Published 2025-11-10 · Fixed in 2.95.11, 3.124.1 CWE-202
Open these records in search → All records by CVSS severity
0 1 4 1 0
