Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.3

langfuse package may let attackers run code

published 13 days ago
Summary

The cleanstart/langfuse software contains a weakness that could allow an attacker to execute their own code on your system. This could lead to unauthorized actions or data exposure. Apply the latest update or follow the vendor’s mitigation guidance as soon as possible.

What to do
  • Update cleanstart langfuse to version 3.225.9-r6.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart langfuse < 3.225.9-r6
Fix: upgrade to 3.225.9-r6
Original advisory text
Next
Security vulnerability affects the langfuse package. Next.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.3 High
Timeline
Published23 Oct 2026
Updated23 Oct 2026
First seen23 Oct 2026
Sources
CLEANSTART-2026-XH75311 · OSV
Track software like this
Free during beta