Description
A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclose sensitive user telemetry data via hardcoded API credentials.
High · 7.5
CVE-2026-37012
EUVD-2026-67267GHSA-gmrc-gf77-xwpg
A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclose sensitive user telemetry data via ha…
Published Aug 27, 2026 · Updated Sep 1, 2026 · Assigned by mitre