Langfuse vulnerabilities
We track 1 vulnerability in Langfuse products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2025.
1vulnerabilities
0critical
1high
0exploited
7.6average CVSS score
Latest Langfuse vulnerabilities
- 7.6 High severity
Langfuse: Improper Authorization
Improper authorization in the background migration endpoints of Langfuse 3.1 before d67b317 allows any authenticated user to invoke migration control functions. This can lead to data corruption or denial of service through unauthorized access to TRPC endpoints