CVE-2025-9799
Full vulnerability record from the local CVENow database.
Description
A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request forgery. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been released to the public and may be exploited.
Severity
LOW
CVSS score
1.3
(v4.0)
Vulnerability status
Analyzed
Source identifier
Published
2025-09-01 22:15:31.283000
Last modified
2026-10-19 17:10:00.173000
View original CVE JSON
{
"id": "CVE-2025-9799",
"sourceIdentifier": "[email protected]",
"published": "2025-09-01T22:15:31.283",
"lastModified": "2026-10-19T17:10:00.173",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request forgery. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been released to the public and may be exploited."
},
{
"lang": "es",
"value": "Una falla de seguridad ha sido descubierta en Langfuse hasta 3.88.0. Afectada por esta vulnerabilidad es la función promptChangeEventSourcing del archivo web/src/features/prompts/server/routers/promptRouter.ts del componente Webhook Gestor. Realizar manipulación resulta en falsificación de petición del lado del servidor. El ataque puede ser iniciado remotamente. Un alto grado de complejidad es necesario para el ataque. La explotación parece ser difícil. El exploit ha sido liberado al público y puede ser explotado."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "n/a",
"product": "Langfuse",
"modules": [
"Webhook Handler"
],
"versions": [
{
"version": "3.0",
"status": "affected"
},
{
"version": "3.1",
"status": "affected"
},
{
"version": "3.2",
"status": "affected"
},
{
"version": "3.3",
"status": "affected"
},
{
"version": "3.4",
"status": "affected"
},
{
"version": "3.5",
"status": "affected"
},
{
"version": "3.6",
"status": "affected"
},
{
"version": "3.7",
"status": "affected"
},
{
"version": "3.8",
"status": "affected"
},
{
"version": "3.9",
"status": "affected"
},
{
"version": "3.10",
"status": "affected"
},
{
"version": "3.11",
"status": "affected"
},
{
"version": "3.12",
"status": "affected"
},
{
"version": "3.13",
"status": "affected"
},
{
"version": "3.14",
"status": "affected"
},
{
"version": "3.15",
"status": "affected"
},
{
"version": "3.16",
"status": "affected"
},
{
"version": "3.17",
"status": "affected"
},
{
"version": "3.18",
"status": "affected"
},
{
"version": "3.19",
"status": "affected"
},
{
"version": "3.20",
"status": "affected"
},
{
"version": "3.21",
"status": "affected"
},
{
"version": "3.22",
"status": "affected"
},
{
"version": "3.23",
"status": "affected"
},
{
"version": "3.24",
"status": "affected"
},
{
"version": "3.25",
"status": "affected"
},
{
"version": "3.26",
"status": "affected"
},
{
"version": "3.27",
"status": "affected"
},
{
"version": "3.28",
"status": "affected"
},
{
"version": "3.29",
"status": "affected"
},
{
"version": "3.30",
"status": "affected"
},
{
"version": "3.31",
"status": "affected"
},
{
"version": "3.32",
"status": "affected"
},
{
"version": "3.33",
"status": "affected"
},
{
"version": "3.34",
"status": "affected"
},
{
"version": "3.35",
"status": "affected"
},
{
"version": "3.36",
"status": "affected"
},
{
"version": "3.37",
"status": "affected"
},
{
"version": "3.38",
"status": "affected"
},
{
"version": "3.39",
"status": "affected"
},
{
"version": "3.40",
"status": "affected"
},
{
"version": "3.41",
"status": "affected"
},
{
"version": "3.42",
"status": "affected"
},
{
"version": "3.43",
"status": "affected"
},
{
"version": "3.44",
"status": "affected"
},
{
"version": "3.45",
"status": "affected"
},
{
"version": "3.46",
"status": "affected"
},
{
"version": "3.47",
"status": "affected"
},
{
"version": "3.48",
"status": "affected"
},
{
"version": "3.49",
"status": "affected"
},
{
"version": "3.50",
"status": "affected"
},
{
"version": "3.51",
"status": "affected"
},
{
"version": "3.52",
"status": "affected"
},
{
"version": "3.53",
"status": "affected"
},
{
"version": "3.54",
"status": "affected"
},
{
"version": "3.55",
"status": "affected"
},
{
"version": "3.56",
"status": "affected"
},
{
"version": "3.57",
"status": "affected"
},
{
"version": "3.58",
"status": "affected"
},
{
"version": "3.59",
"status": "affected"
},
{
"version": "3.60",
"status": "affected"
},
{
"version": "3.61",
"status": "affected"
},
{
"version": "3.62",
"status": "affected"
},
{
"version": "3.63",
"status": "affected"
},
{
"version": "3.64",
"status": "affected"
},
{
"version": "3.65",
"status": "affected"
},
{
"version": "3.66",
"status": "affected"
},
{
"version": "3.67",
"status": "affected"
},
{
"version": "3.68",
"status": "affected"
},
{
"version": "3.69",
"status": "affected"
},
{
"version": "3.70",
"status": "affected"
},
{
"version": "3.71",
"status": "affected"
},
{
"version": "3.72",
"status": "affected"
},
{
"version": "3.73",
"status": "affected"
},
{
"version": "3.74",
"status": "affected"
},
{
"version": "3.75",
"status": "affected"
},
{
"version": "3.76",
"status": "affected"
},
{
"version": "3.77",
"status": "affected"
},
{
"version": "3.78",
"status": "affected"
},
{
"version": "3.79",
"status": "affected"
},
{
"version": "3.80",
"status": "affected"
},
{
"version": "3.81",
"status": "affected"
},
{
"version": "3.82",
"status": "affected"
},
{
"version": "3.83",
"status": "affected"
},
{
"version": "3.84",
"status": "affected"
},
{
"version": "3.85",
"status": "affected"
},
{
"version": "3.86",
"status": "affected"
},
{
"version": "3.87",
"status": "affected"
},
{
"version": "3.88.0",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 1.3,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.6,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:H/Au:S/C:P/I:P/A:P",
"baseScore": 4.6,
"accessVector": "NETWORK",
"accessComplexity": "HIGH",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 3.9,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-09-02T19:51:53.283383Z",
"id": "CVE-2025-9799",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-918"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:langfuse:langfuse:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.88.0",
"matchCriteriaId": "F5561CC2-09A8-4C6D-84CD-E804A8FBFED7"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/langfuse/langfuse/issues/8522",
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking"
]
},
{
"url": "https://github.com/langfuse/langfuse/issues/8522#issue-3320549867",
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking"
]
},
{
"url": "https://vuldb.com/?ctiid.322114",
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.322114",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.641128",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}