TI-2026-30074 CVE-2026-41487
Improper access control in langfuse
Priority LOW 29
Langfuse is an open source large language model engineering platform.
Vulnerabilities
6 records
TI-2026-19383 CVE-2026-24055
Langfuse Slack OAuth Installation Endpoint Lacks Authentication, Enabling Arbitrary Project Linking
Priority MEDIUM 61
Langfuse is an open source large language model engineering platform.
Priority LOW 28
Langfuse is an open source large language model engineering platform.
TI-2025-39896 CVE-2025-64504
Langfuse vulnerable to cross‑organization enumeration of member & invitation lists via project membership APIs
Priority LOW 23
Langfuse is an open source large language model engineering platform.
TI-2025-36879 CVE-2025-59305 · GHSA-9m9r-362p-h3rf
Improper authorization in the background migration endpoints of Langfuse 3.1 before…
Priority HIGH 66
Improper authorization in the background migration endpoints of Langfuse 3.1 before d67b317 allows any authenticated user to invoke migration control functions.
TI-2025-08988 CVE-2025-9799 · GHSA-6fxv-w47f-g229
Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery
Priority MEDIUM 45
A security flaw has been discovered in Langfuse up to 3.88.0.