CVE-2026-41487

Langfuse is an open source large language model engineering platform. From version 3.68.0 to before version 3.167.0, there is a role-based-access control flaw in the LLM connection update flow. An authenticated, low-privileged user of role “member” in a project could request the update of an existing LLM connection to an attacker-controlled baseUrl, causing Langfuse to reuse the stored provider secret and redirect the test request to an attacker-controlled endpoint. This could expose the plaintext provider LLM API key for that connection. The attack is only possible if a user is already part of a project and has “member” scoped access. This issue has been patched in version 3.167.0.

• CWE-284

• https://github.com/langfuse/langfuse/commit/7527bb0d84bc0a3dc24a4b16d22ed2e46e6dddffPatch
• https://github.com/langfuse/langfuse/commit/e12386f9d4368bbfff24a4ad7fd53641091605ffPatch
• https://github.com/langfuse/langfuse/pull/13027Issue Tracking, Patch
• https://github.com/langfuse/langfuse/pull/13055Issue Tracking, Patch
• https://github.com/langfuse/langfuse/releases/tag/v3.167.0Release Notes
• https://github.com/langfuse/langfuse/security/advisories/GHSA-2524-j966-gfghMitigation, Patch, Vendor Advisory

Published

May 8, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-41481LangChain is a framework for building agents and LLM-powered…6.5
• CVE-2026-41482Frappe is a full-stack web application framework. Prior to 1…7.1
• CVE-2026-41483OpenTelemetry.Resources.Azure is the .NET resource detector …5.9
• CVE-2026-41484OpenTelemetry.Exporter.OneCollector is a .NET exporter that …5.9
• CVE-2026-41485Kyverno is a policy engine designed for cloud native platfor…7.7
• CVE-2026-41486Ray is an AI compute engine. From version 2.54.0 to before v…8.8
• CVE-2026-41488LangChain is a framework for building agents and LLM-powered…3.1
• CVE-2026-41489Pi-hole is a DNS sinkhole that protects devices from unwante…8.8
• CVE-2026-4149Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code …9.8
• CVE-2026-41490Dagster is an orchestration platform for the development, pr…8.3
• CVE-2026-41491Dapr is a portable, event-driven, runtime for building distr…8.1
• CVE-2026-41492Dgraph is an open source distributed GraphQL database. Prior…9.8