langfuse vulnerabilities
4 published CVEs name langfuse among the affected products.
- 4Published CVEs4 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-41487
Langfuse: Improper role-based-access control in Langfuse LLM connection management allowed users of role “member” to retrieve stored LLM provider API keys
langfuse · langfuse
Medium5.3 - CVE-2026-24055
Langfuse Slack OAuth Installation Endpoint Lacks Authentication, Enabling Arbitrary Project Linking
langfuse · langfuse
Medium6.3 - CVE-2025-65107
Langfuse SSO Account Takeover via CSRF or phishing attack
langfuse · langfuse
Medium6.5 - CVE-2025-64504
Langfuse vulnerable to cross‑organization enumeration of member & invitation lists via project membership APIs
langfuse · langfuse
Medium5.0