CVE-2025-64504

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-64504", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2025-11-05T19:12:25.104Z", "datePublished": "2025-11-10T21:51:36.603Z", "dateUpdated": "2025-11-12T20:13:56.630Z"}, "containers": {"cna": {"title": "Langfuse vulnerable to cross\u2011organization enumeration of member & invitation lists via project membership APIs", "problemTypes": [{"descriptions": [{"cweId": "CWE-202", "lang": "en", "description": "CWE-202: Exposure of Sensitive Information Through Data Queries", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/langfuse/langfuse/security/advisories/GHSA-94hf-6gqq-pj69", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/langfuse/langfuse/security/advisories/GHSA-94hf-6gqq-pj69"}, {"name": "https://github.com/langfuse/langfuse/commit/67990ebfdcf0f0c32a6710efa7ddbda073812ab4", "tags": ["x_refsource_MISC"], "url": "https://github.com/langfuse/langfuse/commit/67990ebfdcf0f0c32a6710efa7ddbda073812ab4"}, {"name": "https://github.com/langfuse/langfuse/commit/6c2529049a4c962928c435984c81a547a497e3e5", "tags": ["x_refsource_MISC"], "url": "https://github.com/langfuse/langfuse/commit/6c2529049a4c962928c435984c81a547a497e3e5"}, {"name": "https://github.com/langfuse/langfuse/releases/tag/v2.70.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/langfuse/langfuse/releases/tag/v2.70.0"}, {"name": "https://github.com/langfuse/langfuse/releases/tag/v2.95.11", "tags": ["x_refsource_MISC"], "url": "https://github.com/langfuse/langfuse/releases/tag/v2.95.11"}, {"name": "https://github.com/langfuse/langfuse/releases/tag/v3.124.1", "tags": ["x_refsource_MISC"], "url": "https://github.com/langfuse/langfuse/releases/tag/v3.124.1"}], "affected": [{"vendor": "langfuse", "product": "langfuse", "versions": [{"version": ">= 2.70.0, < 2.95.11", "status": "affected"}, {"version": ">= 3.0.0, < 3.124.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2025-11-10T21:51:36.603Z"}, "descriptions": [{"lang": "en", "value": "Langfuse is an open source large language model engineering platform. Starting in version 2.70.0 and prior to versions 2.95.11 and 3.124.1, in certain project membership APIs, the server trusted a user\u2011controlled orgId and used it in authorization checks. As a result, any authenticated user on the same Langfuse instance could enumerate names and email addresses of users in another organization if they knew the target organization\u2019s ID. Disclosure is limited to names and email addresses of members/invitees. No customer data such as traces, prompts, or evaluations is exposed or accessible. For Langfuse Cloud, the maintainers ran a thorough investigation of access logs of the last 30 days and could not find any evidence that this vulnerability was exploited. For most self-hosting deployments, the attack surface is significantly reduced given an SSO provider is configured and email/password sign-up is disabled. In these cases, only users who authenticate via the Enterprise SSO IdP (e.g. Okta) would be able to exploit this vulnerability to access the member list, i.e. internal users getting access to a list of other internal users. In order to exploit the vulnerability, the actor must have a valid Langfuse user account within the same instance, know the target orgId, and use the request made to the API that powers the frontend membership tables, including their project/user authentication token, while changing the orgId to the target organization. Langfuse Cloud (EU, US, HIPAA) were affected until fix deployment on November 1, 2025. The maintainers reviewed the Langfuse Cloud access logs from the past 30 days and found no evidence that this vulnerability was exploited. Self-Hosted versions which contain patches include v2.95.11 for major version 2 and v3.124.1 for major version 3. There are no known workarounds. Upgrading is required to fully mitigate this issue."}], "source": {"advisory": "GHSA-94hf-6gqq-pj69", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-12T17:35:25.499140Z", "id": "CVE-2025-64504", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-12T20:13:56.630Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-64504", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-12T17:35:25.499140Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-12T17:35:27.532Z"}}], "cna": {"title": "Langfuse vulnerable to cross\u2011organization enumeration of member & invitation lists via project membership APIs", "source": {"advisory": "GHSA-94hf-6gqq-pj69", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "langfuse", "product": "langfuse", "versions": [{"status": "affected", "version": ">= 2.70.0, < 2.95.11"}, {"status": "affected", "version": ">= 3.0.0, < 3.124.1"}]}], "references": [{"url": "https://github.com/langfuse/langfuse/security/advisories/GHSA-94hf-6gqq-pj69", "name": "https://github.com/langfuse/langfuse/security/advisories/GHSA-94hf-6gqq-pj69", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/langfuse/langfuse/commit/67990ebfdcf0f0c32a6710efa7ddbda073812ab4", "name": "https://github.com/langfuse/langfuse/commit/67990ebfdcf0f0c32a6710efa7ddbda073812ab4", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/langfuse/langfuse/commit/6c2529049a4c962928c435984c81a547a497e3e5", "name": "https://github.com/langfuse/langfuse/commit/6c2529049a4c962928c435984c81a547a497e3e5", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/langfuse/langfuse/releases/tag/v2.70.0", "name": "https://github.com/langfuse/langfuse/releases/tag/v2.70.0", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/langfuse/langfuse/releases/tag/v2.95.11", "name": "https://github.com/langfuse/langfuse/releases/tag/v2.95.11", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/langfuse/langfuse/releases/tag/v3.124.1", "name": "https://github.com/langfuse/langfuse/releases/tag/v3.124.1", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Langfuse is an open source large language model engineering platform. Starting in version 2.70.0 and prior to versions 2.95.11 and 3.124.1, in certain project membership APIs, the server trusted a user\u2011controlled orgId and used it in authorization checks. As a result, any authenticated user on the same Langfuse instance could enumerate names and email addresses of users in another organization if they knew the target organization\u2019s ID. Disclosure is limited to names and email addresses of members/invitees. No customer data such as traces, prompts, or evaluations is exposed or accessible. For Langfuse Cloud, the maintainers ran a thorough investigation of access logs of the last 30 days and could not find any evidence that this vulnerability was exploited. For most self-hosting deployments, the attack surface is significantly reduced given an SSO provider is configured and email/password sign-up is disabled. In these cases, only users who authenticate via the Enterprise SSO IdP (e.g. Okta) would be able to exploit this vulnerability to access the member list, i.e. internal users getting access to a list of other internal users. In order to exploit the vulnerability, the actor must have a valid Langfuse user account within the same instance, know the target orgId, and use the request made to the API that powers the frontend membership tables, including their project/user authentication token, while changing the orgId to the target organization. Langfuse Cloud (EU, US, HIPAA) were affected until fix deployment on November 1, 2025. The maintainers reviewed the Langfuse Cloud access logs from the past 30 days and found no evidence that this vulnerability was exploited. Self-Hosted versions which contain patches include v2.95.11 for major version 2 and v3.124.1 for major version 3. There are no known workarounds. Upgrading is required to fully mitigate this issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-202", "description": "CWE-202: Exposure of Sensitive Information Through Data Queries"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2025-11-10T21:51:36.603Z"}}}, "cveMetadata": {"cveId": "CVE-2025-64504", "state": "PUBLISHED", "dateUpdated": "2025-11-12T20:13:56.630Z", "dateReserved": "2025-11-05T19:12:25.104Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2025-11-10T21:51:36.603Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "langfuse", "vendor": "langfuse", "versions": [{"status": "affected", "version": ">= 2.70.0, < 2.95.11"}, {"status": "affected", "version": ">= 3.0.0, < 3.124.1"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:langfuse:langfuse:*:*:*:*:*:*:*:*", "matchCriteriaId": "CC57138A-1F39-4B72-AD05-88B0F0AA29F2", "versionEndExcluding": "2.95.11", "versionStartIncluding": "2.70.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:langfuse:langfuse:*:*:*:*:*:*:*:*", "matchCriteriaId": "72676730-1688-4036-9FF2-A85CFA3A3A3B", "versionEndExcluding": "3.124.1", "versionStartIncluding": "3.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Langfuse is an open source large language model engineering platform. Starting in version 2.70.0 and prior to versions 2.95.11 and 3.124.1, in certain project membership APIs, the server trusted a user\u2011controlled orgId and used it in authorization checks. As a result, any authenticated user on the same Langfuse instance could enumerate names and email addresses of users in another organization if they knew the target organization\u2019s ID. Disclosure is limited to names and email addresses of members/invitees. No customer data such as traces, prompts, or evaluations is exposed or accessible. For Langfuse Cloud, the maintainers ran a thorough investigation of access logs of the last 30 days and could not find any evidence that this vulnerability was exploited. For most self-hosting deployments, the attack surface is significantly reduced given an SSO provider is configured and email/password sign-up is disabled. In these cases, only users who authenticate via the Enterprise SSO IdP (e.g. Okta) would be able to exploit this vulnerability to access the member list, i.e. internal users getting access to a list of other internal users. In order to exploit the vulnerability, the actor must have a valid Langfuse user account within the same instance, know the target orgId, and use the request made to the API that powers the frontend membership tables, including their project/user authentication token, while changing the orgId to the target organization. Langfuse Cloud (EU, US, HIPAA) were affected until fix deployment on November 1, 2025. The maintainers reviewed the Langfuse Cloud access logs from the past 30 days and found no evidence that this vulnerability was exploited. Self-Hosted versions which contain patches include v2.95.11 for major version 2 and v3.124.1 for major version 3. There are no known workarounds. Upgrading is required to fully mitigate this issue."}, {"lang": "es", "value": "Langfuse es una plataforma de ingenier\u00eda de modelos de lenguaje grandes de c\u00f3digo abierto. A partir de la versi\u00f3n 2.70.0 y antes de las versiones 2.95.11 y 3.124.1, en ciertas API de membres\u00eda de proyectos, el servidor confiaba en un orgId controlado por el usuario y lo usaba en las comprobaciones de autorizaci\u00f3n. Como resultado, cualquier usuario autenticado en la misma instancia de Langfuse pod\u00eda enumerar nombres y direcciones de correo electr\u00f3nico de usuarios en otra organizaci\u00f3n si conoc\u00edan el ID de la organizaci\u00f3n objetivo. La divulgaci\u00f3n se limita a nombres y direcciones de correo electr\u00f3nico de miembros/invitados. Ning\u00fan dato de cliente como rastros, prompts o evaluaciones est\u00e1 expuesto o accesible. Para Langfuse Cloud, los mantenedores realizaron una investigaci\u00f3n exhaustiva de los registros de acceso de los \u00faltimos 30 d\u00edas y no pudieron encontrar ninguna evidencia de que esta vulnerabilidad fuera explotada. Para la mayor\u00eda de las implementaciones de autoalojamiento, la superficie de ataque se reduce significativamente dado que un proveedor de SSO est\u00e1 configurado y el registro por correo electr\u00f3nico/contrase\u00f1a est\u00e1 deshabilitado. En estos casos, solo los usuarios que se autentican a trav\u00e9s del IdP de SSO Empresarial (por ejemplo, Okta) podr\u00edan explotar esta vulnerabilidad para acceder a la lista de miembros, es decir, usuarios internos obteniendo acceso a una lista de otros usuarios internos. Para explotar la vulnerabilidad, el actor debe tener una cuenta de usuario v\u00e1lida de Langfuse dentro de la misma instancia, conocer el orgId objetivo y usar la solicitud hecha a la API que alimenta las tablas de membres\u00eda del frontend, incluyendo su token de autenticaci\u00f3n de proyecto/usuario, mientras cambia el orgId a la organizaci\u00f3n objetivo. Langfuse Cloud (UE, EE. UU., HIPAA) se vieron afectados hasta el despliegue de la correcci\u00f3n el 1 de noviembre de 2025. Los mantenedores revisaron los registros de acceso de Langfuse Cloud de los \u00faltimos 30 d\u00edas y no encontraron evidencia de que esta vulnerabilidad fuera explotada. Las versiones autoalojadas que contienen parches incluyen v2.95.11 para la versi\u00f3n principal 2 y v3.124.1 para la versi\u00f3n principal 3. No hay soluciones alternativas conocidas. Se requiere actualizar para mitigar completamente este problema."}], "id": "CVE-2025-64504", "lastModified": "2026-06-17T09:54:28.723", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-64504", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-11-12T17:35:25.499140Z", "version": "2.0.3"}}]}, "published": "2025-11-10T22:15:39.273", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/langfuse/langfuse/commit/67990ebfdcf0f0c32a6710efa7ddbda073812ab4"}, {"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/langfuse/langfuse/commit/6c2529049a4c962928c435984c81a547a497e3e5"}, {"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/langfuse/langfuse/releases/tag/v2.70.0"}, {"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/langfuse/langfuse/releases/tag/v2.95.11"}, {"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/langfuse/langfuse/releases/tag/v3.124.1"}, {"source": "security-advisories@github.com", "tags": ["Vendor Advisory"], "url": "https://github.com/langfuse/langfuse/security/advisories/GHSA-94hf-6gqq-pj69"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-202"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"created": "2025-11-12T12:48:14.669811+00:00", "updated": "2025-11-12T12:48:14.669835+00:00", "vendors": ["langfuse", "langfuse$PRODUCT$langfuse"]}