Security Advisory

CVE-2026-37012

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-27 00:00:00

Last updated 2026-09-01 19:32:01

Assigner mitre

CVSS score 7.5

State PUBLISHED

Description

A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclose sensitive user telemetry data via hardcoded API credentials.

← Browse all CVEs View on cve.org ↗