CVE-2025-9799

MediumCVSS 5.0

Published: 01/09/2025(UTC)Updated: 19/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

20th percentile - higher than 20% of all known CVEs

Summary

Langfuse up to version 3.88.0 has a server-side request forgery (SSRF) vulnerability in the promptChangeEventSourcing function in web/src/features/prompts/server/routers/promptRouter.ts (Webhook Handler component). The attack may be initiated remotely but requires high complexity.

Risk Assessment

An attacker could exploit this vulnerability to send requests from the server to internal resources, potentially leading to information disclosure or other attacks.

Recommendation

Update Langfuse to a patched version or restrict webhook calls to trusted addresses.

Other vulnerabilities in Langfuse

CVE-2025-65107Medium
Langfuse versions 2.95.0 to before 2.95.12 and 3.17.0 to before 3.131.0 have a vulnerability in SSO provider configurations without an explicit AUTH_<PROVIDER>_CHECK setting, potentially allowing account takeover via CSRF or phishing.

Original NVD description (English source)

A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request forgery. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been released to the public and may be exploited.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS