ADVISORY UNAUTH-2026-0005
TYPE exposure-class
PRODUCT Langfuse
SEVERITY MEDIUM

MEDIUM

Langfuse reachable from the internet

published 2026-08-05 · updated 2026-08-05

Why it matters

Your LLM observability stack is publicly reachable — Langfuse stores prompts, completions, tool calls, and agent session state that can contain customer data and secrets. If the sign-up page is open, anyone can create an account and start reading those traces.

What a probe sees

GET :3000/api/public/health answers Langfuse's health JSON (version included); the sign-up page is reachable.

Internet-facing exposure — observable from the public internet with GET-only probes (the same probes unauth.dev sends).

agent-trace-store

In the wild

HONEYPOT EVIDENCE · only unauth.dev publishes this
SERVICE langfuse
PROBES (30d) 2,399
FIRST SEEN 2026-07-28
LAST SEEN 2026-08-05

Day-granularity probe counts from the unauth.dev botwatch honeypot (2399 observed across retained history), refreshed monthly. No source IPs exist in the underlying data. Live view: /botwatch.

Fix it

Fix card: langfuse-exposed →

References

https://langfuse.com/self-hosting/configuration

Cite this record

unauth.dev advisory UNAUTH-2026-0005 — observed 2026-08 · CC-BY 4.0

Canonical URL: https://unauth.dev/advisories/UNAUTH-2026-0005. This record is part of the unauth.dev advisory dataset, published under CC-BY 4.0: attribute "unauth.dev / Raúl Acedo". Schema: additive-only within v1; this id will never be renumbered or reused.