{"data":{"id":"2afce461-3b10-41c0-aa24-9cda573e869d","title":"CVE-2026-41487: Langfuse is an open source large language model engineering platform. From version 3.68.0 to before version 3.167.0…","summary":"Langfuse versions from 3.68.0 up to, but not including, 3.167.0 contain a role-based access control flaw in the LLM connection update flow. An authenticated user with the \"member\" role in a project can point an existing LLM connection at an attacker-controlled baseUrl, causing Langfuse to reuse the stored provider secret and send the test request to that endpoint, which could expose the plaintext provider LLM API key. The attack requires that the user already belongs to the project with \"member\" scoped access.","solution":"This issue has been patched in version 3.167.0.","labels":["security","industry"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-41487","publishedAt":"2026-05-08T15:16:39.800Z","cveId":"CVE-2026-41487","cweIds":["CWE-284"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Langfuse"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Langfuse LLM connection update flaw exposes stored provider API key","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00181,"epssCheckedAt":"2026-11-11T00:13:30.870Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-10T12:16:14.817Z","patchAvailable":null,"disclosureDate":"2026-05-08T15:16:39.800Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[]}}