A vulnerability, which was classified as problematic, has been found in Langfuse up to 2.95.10/3.124.0. Affected by this vulnerability is an unknown functionality of the component API. Performing manipulation results in exposure of sensitive information through data queries.
This vulnerability is known as CVE-2025-64504. Remote exploitation of the attack is possible. No exploit is available.
It is advisable to upgrade the affected component.
